opensearch-project / alerting-dashboards-plugin

📟 Manage your monitors, alerts and notifications in OpenSearch Dashboards
https://opensearch.org/docs/latest/monitoring-plugins/alerting/index/
Apache License 2.0
25 stars 88 forks source link

Alerting items cannot be isolated by tenant. #1096

Open jy03243107 opened 2 months ago

jy03243107 commented 2 months ago

Describe the bug

There is a bug in the Alerting feature of the OpenSearch Plugin: Although users can be granted the ability to view items on the Alerting monitor or alert pages by assigning them the alerting_read_access_new role (a new role copied from alerting_read_access), the Alerting Items cannot be isolated by Tenant. This means that as long as a user’s role includes alerting_read_access_new, they can see all Alerting Items across the entire system, even if I have added a tenant specific to this user in alerting_read_access_new.

Expected behavior I hope this bug can be fixed in the next version so that user roles can isolate alerting items by tenant.

OpenSearch Version 2.15.0

Dashboards Version 2.15.0

Plugins Alerting Reporting

Host/Environment (please complete the following information):

CCongWang commented 2 months ago

looks like it's alerting plugin, @opensearch-project/plugins could you please transfer to the right repo?

LDrago27 commented 2 months ago

@opensearch-project/admin move it to alerting-dashboards

dblock commented 1 month ago

[Catch All Triage - 1, 2, 3, 4]