elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.63k stars 8.22k forks source link

[APM] Error when viewing the Infrastructure tab without access to Infrastructure app #191198

Open crespocarlos opened 2 months ago

crespocarlos commented 2 months ago

Summary

If a user does not have Infrastructure privilege or elasticsearch privilege for related indices they cannot access Infrastructure data, resulting in an error.

Image

Steps to reproduce

Possible solution

We could show the Infrastructure tab only if application.uiCapabilities.infrastructure.show is true or display a message saying that the user doesn't have permission if the same condition is not met, eg:

image

Because roles could also be configured such that users could have permission to Infrastructure but not to read Infrastructure indices, we also need to check on the server side, before running the query, whether the current user has permission to read from Infrastructure indices (see an example here)

elasticmachine commented 2 months ago

Pinging @elastic/obs-ux-infra_services-team (Team:obs-ux-infra_services)

crespocarlos commented 2 months ago

cc @roshan-elastic