elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.72k stars 8.14k forks source link

[APM] Error when viewing the Infrastructure tab without access to Infrastructure app #191198

Open crespocarlos opened 4 weeks ago

crespocarlos commented 4 weeks ago

Summary

If a user does not have Infrastructure privilege or elasticsearch privilege for related indices they cannot access Infrastructure data, resulting in an error.

Image

Steps to reproduce

Possible solution

We could show the Infrastructure tab only if application.uiCapabilities.infrastructure.show is true or display a message saying that the user doesn't have permission if the same condition is not met, eg:

image

Because roles could also be configured such that users could have permission to Infrastructure but not to read Infrastructure indices, we also need to check on the server side, before running the query, whether the current user has permission to read from Infrastructure indices (see an example here)

elasticmachine commented 4 weeks ago

Pinging @elastic/obs-ux-infra_services-team (Team:obs-ux-infra_services)

crespocarlos commented 4 weeks ago

cc @roshan-elastic