[Security Solution]Rule Grouping navigation showing without Access to Rule Kibana Feature

ghost commented 1 year ago

Describe the bug: Rule Grouping navigation showing without Access to Rule Kibana Feature

Kibana/Elasticsearch Stack version Version: 8.10.0 SNAPSHOT Commit: 4637b744d80686a2f9cbdfaf2f8b24a0c92f79c8 Build: 65796

Browser and Browser OS Version: Firefox for windows OS Version: 116.0.2 (64-bit)

Elastic Endpoint Version: v8.10.0-dev.0

Original install method: Build summary: https://artifacts-api.elastic.co/v1/search/8.10.0-SNAPSHOT

Functional Area: Security App side Navigation

Initial Setup:

Create a custom rule with below kibana privilege (i.e Set Security to None and Case to All )

Steps to reproduce

Login to Kibana
Navigate to Security App
Observed that Rule Group and its two pages are showing however user don't have the access to those features

Additional Observation

None

Current behavior

Rule Group showing in side navigation
Two Page under Rule Group are showing SIEM Rules and Shared Exception Lists
Cloud Posture Benchmarks page is not showing on application ( correct behavior )

Expected behavior:

Rule Grouping navigation should not show at all as inside pages of this group has no access on application, so complete group should not show on side navigation

Screenshots:

https://github.com/elastic/kibana/assets/59917825/e631ae39-640b-4dc6-87fd-6b0834ad5f93

Errors in browser console: N/A

Any additional context (logs, chat logs, magical formulas, etc.):

N/A

elasticmachine commented 1 year ago

Pinging @elastic/security-solution (Team: SecuritySolution)

elasticmachine commented 1 year ago

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

ghost commented 1 year ago

@amolnater-qasource please review

amolnater-qasource commented 1 year ago

Reviewed.

semd commented 1 year ago

It is going to be fixed here https://github.com/elastic/kibana/pull/163102

machadoum commented 1 year ago

This PR https://github.com/elastic/kibana/pull/163102 is merged. @karanbirsingh-qasource could you check if the bug is still happening? This is how the page looks to me:

MadameSheema commented 1 year ago

@karanbirsingh-qasource @sukhwindersingh-qasource can you please validate this on latest BC? Thanks!

ghost commented 1 year ago

Hi @MadameSheema

We have validated this issue on 8.10 BC2 and found the issue to be Fixed ✔️ . Setting Security Feature to None does not show Rule Page in security app.

Kibana/Elasticsearch Stack version

Version: 8.10.0 BC2
Commit: fa3473f42d7c5e7a3c2d66026a153e01002f5d3c
Build: 66107

Screen-shot:

Hence we are closing this issue and adding "QA:Validated" tag to it.

thanks !!

elastic / kibana

[Security Solution]Rule Grouping navigation showing without Access to Rule Kibana Feature #163559