elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.63k stars 8.22k forks source link

[Fleet]: User is able to navigate to Add integration page with user role with Agent policies: `None`. #191382

Closed amolnater-qasource closed 1 month ago

amolnater-qasource commented 2 months ago

Kibana Build details:

VERSION: 8.16.0-SNAPSHOT
BUILD: 77679
COMMIT: 6b091fe3b410eaae9d4805c0a3c0ea6168bf66b0

Role:

Integrations: All
Fleet: All
Agents: Read
Agent policies: None
Settings: Read

Image

Preconditions:

  1. 8.16.0-SNAPSHOT Kibana cloud environment should be available.
  2. New User should be created with above defined role.

Steps to reproduce:

  1. Login with the above user.
  2. Navigate to Integrations>Nginx>Add Nginx.
  3. Observe user is navigated to Add Nginx integration page.
  4. Select New policy and click Save and continue.
  5. Observe forbidden error is displayed.

Expected Result: User should not be able to navigate to Add integration page with user role Agent policies: None and appropriate permissions required should be visible.

Screen Recording:

https://github.com/user-attachments/assets/180030c9-8937-4cfc-a1b6-136e7c329f10

Feature: https://github.com/elastic/ingest-dev/issues/2903

elasticmachine commented 2 months ago

Pinging @elastic/fleet (Team:Fleet)

amolnater-qasource commented 2 months ago

@karanbirsingh-qasource Please review.

ghost commented 2 months ago

secondary review of this ticket is done

criamico commented 1 month ago

I tested on latest main and couldn't reproduce it. I created a role as specified above:

Image

I then logged in and tried to install an integration (tried with different ones) but the option to install was greyed out:

Image

@amolnater-qasource could you check again if you can repro this bug?

amolnater-qasource commented 1 month ago

Hi @criamico

Thank you for the update. We have revalidated this issue on latest 8.16.0 SNAPSHOT and found it fixed now.

Observations:

Build details: VERSION: 8.16.0 SNAPSHOT BUILD: 78786 COMMIT: 3d2d667e3d7a56d577f590581a19b599ab332b7b

Screenshot: Image

Hence, we are closing this issue and marking as QA:Validated.

Thanks!!