search

elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.72k stars 8.14k forks source link

Rules with "Stack Rules" role visibility are not visible for the users with kibana_admin role #193549

Open ersin-erdal opened 7 hours ago

ersin-erdal commented 7 hours ago

This issue has emerged from an SDH.

There are 3 rule types that has Role Visibility option: Elasticsearch query, Custom Threshold and Anomaly Detection.

For a user with kibana_system, monitoring_user, kibana_admin roles:

  1. "Stack Rules" option is not displayed in the Role Visibility selectbox.
  2. Above rules are not displayed when they have "Stack Rules" role visibility.

Only Elasticsearch rule becomes visible if a role with Stack Rules kibana privilege is assigned to the user. This doesn't work for the other two rule types.

To reproduce the issue:

  1. Login with superadmin (elastic)
  2. Create a user with kibana_system, monitoring_user, kibana_admin roles.
  3. Create one of the above rules with "Stack Rules" role visibility.
  4. Logout and login with the user you have created.
  5. Go to Stack Management > Rules page.
  6. The rule is not displayed on the page

Expected behaviour: Rule to be displayed on the page.

elasticmachine commented 7 hours ago

Pinging @elastic/response-ops (Team:ResponseOps)

ersin-erdal commented 7 hours ago

There is also the following issue created before: https://github.com/elastic/kibana/issues/191075