elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.76k stars 8.16k forks source link

[Fleet]: Unable to edit shared integration when few agent policies aren't accessible to space2 with User Role: `All`. #194514

Open amolnater-qasource opened 3 hours ago

amolnater-qasource commented 3 hours ago

Kibana Build details:

VERSION: 8.16.0 SNAPSHOT
BUILD: 78702
COMMIT: 2a12f68d66ed1cbc422f8a92f751d1d6e4c02bdc

Role: space: SPACE2 and Space 3

Integrations: All
Fleet: Read
Agents: All
Agent policies: All
Settings: All

Image

Preconditions:

  1. 8.16.0-SNAPSHOT Kibana cloud environment should be available.
  2. New User should be created with above defined role.

Steps to reproduce:

  1. Login with the above user to the second space.
  2. Create a few policies in Space2: say Agent policy 1, Agent policy 2, Agent policy 3 and Agent policy 4.
  3. Now Add Nginx as shared integration to all these policies.
  4. Now give access of Agent policy 2 and Agent policy 3 to Spac3.
  5. Navigate to the Space3 and navigate to the Agent policy 2.
  6. Click edit Nginx and observe error is displayed Agent policy 6d80a3a9-12c6-45be-9f44-a5999d4ec7ae not found.

Expected Result: User should be able to edit shared integration when few agent policies aren't accessible to space2 with User Role: All.

Screen Recording:

https://github.com/user-attachments/assets/28141e90-6169-47b0-8563-613875497ca5

Feature: https://github.com/elastic/ingest-dev/issues/2903 https://github.com/elastic/ingest-dev/issues/1664

elasticmachine commented 3 hours ago

Pinging @elastic/fleet (Team:Fleet)

amolnater-qasource commented 3 hours ago

@muskangulati-qasource Please review.

muskangulati-qasource commented 2 hours ago

Secondary review is Done for this ticket!