maxmustermann/kibana
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
kibana/x-pack/plugins
History
Gidi Meir Morris 4abe864f10
Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 
This PR adds _Role Based Access-Control_ to the Alerting framework & Actions feature using  Kibana Feature Controls, addressing most of the Meta issue: https://github.com/elastic/kibana/issues/43994

This also closes https://github.com/elastic/kibana/issues/62438

This PR includes the following:

1. Adds `alerting` specific Security Actions (not to be confused with Alerting Actions) to the `security` plugin which allows us to assign alerting specific privileges to users of other plugins using the `features` plugin.
2. Removes the security wrapper from the savedObjectsClient in AlertsClient and instead plugs in the new AlertsAuthorization which performs the privilege checks on each api call made to the AlertsClient.
3. Adds privileges in each plugin that is already using the Alerting Framework which mirror (as closely as possible) the existing api-level tag-based privileges and plugs them into the AlertsClient.
4. Adds feature granted privileges arounds Actions (by relying on Saved Object privileges under the hood) and plugs them into the ActionsClient
5. Removes the legacy api-level tag-based privilege system from both the Alerts and Action HTTP APIs
2020-07-22 14:45:57 +01:00
..
actions Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
alerting_builtins Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
alerts Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
apm Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
audit_trail [Audit Logging] Add AuditTrail service (#69278) 2020-07-07 21:16:39 +02:00
beats_management Add @elastic/safer-lodash-set as an alternative to lodash.set (#67452) 2020-07-15 10:29:57 +02:00
canvas [pre-req] New Component Layout proposal (#72385) 2020-07-21 19:18:57 -04:00
case [SIEM][CASE] IBM Resilient Connector (#66385) 2020-07-10 02:23:20 +03:00
cloud [Telemetry] Collector Schema (#64942) 2020-06-27 02:52:26 +03:00
code
console_extensions
cross_cluster_replication Add doc titles to ES UI apps (#71045) 2020-07-21 07:04:40 -07:00
dashboard_enhanced [kbn/optimizer] implement "requiredBundles" property of KP plugins (#70911) 2020-07-09 18:43:17 -07:00
dashboard_mode chore(NA): upgrade to lodash@4 (#69868) 2020-07-03 01:30:13 +01:00
data_enhanced [Search] Add telemetry for data plugin search service (#70677) 2020-07-15 11:49:34 +03:00
discover_enhanced [kbn/optimizer] implement "requiredBundles" property of KP plugins (#70911) 2020-07-09 18:43:17 -07:00
embeddable_enhanced Add a few asciidoc readmes (#72082) 2020-07-17 11:08:57 -04:00
encrypted_saved_objects Search across spaces (#67644) 2020-07-13 20:10:17 -04:00
enterprise_search Workplace Search in Kibana MVP (#70979) 2020-07-13 13:10:35 -05:00
event_log [eventLog] search for actions/alerts as hidden saved objects (#70395) 2020-07-16 09:10:51 -04:00
features Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
file_upload [Telemetry] Collector Schema (#64942) 2020-06-27 02:52:26 +03:00
global_search Rename legacy ES mock accessors (#70432) 2020-07-07 13:38:17 +02:00
global_search_providers [GS] add savedObjects result provider (#68619) 2020-07-06 13:04:43 +02:00
graph register graph usage (#72041) 2020-07-17 17:16:28 +02:00
grokdebugger [kbn/optimizer] implement "requiredBundles" property of KP plugins (#70911) 2020-07-09 18:43:17 -07:00
index_lifecycle_management Add doc titles to ES UI apps (#71045) 2020-07-21 07:04:40 -07:00
index_management Add doc titles to ES UI apps (#71045) 2020-07-21 07:04:40 -07:00
infra Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
ingest_manager [Ingest Manager] Allow to force unenroll from the UI (#72386) 2020-07-21 17:34:19 -04:00
ingest_pipelines Add doc titles to ES UI apps (#71045) 2020-07-21 07:04:40 -07:00
lens [Lens] Legend config (#70619) 2020-07-22 12:14:59 +02:00
license_management Add doc titles to ES UI apps (#71045) 2020-07-21 07:04:40 -07:00
licensing [kbn/optimizer] implement "requiredBundles" property of KP plugins (#70911) 2020-07-09 18:43:17 -07:00
lists [Security Solution][Exceptions] - Require non empty entries and non empty string values in exception list items (#72748) 2020-07-21 21:00:46 -04:00
logstash Management API - simpler interface, remove app context usage (#71144) 2020-07-14 11:30:01 -05:00
maps Add inspector for VEGA (#70941) 2020-07-21 14:45:51 +03:00
maps_legacy_licensing
ml [ML] Fix layout of anomaly chart tooltip for long field values (#72689) 2020-07-22 09:30:13 +01:00
monitoring Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
observability [Observability] Remove app logos (#72259) 2020-07-20 10:25:39 +02:00
oss_telemetry Rename legacy ES mock accessors (#70432) 2020-07-07 13:38:17 +02:00
painless_lab Upgrade EUI to v26.3.1 (#70243) 2020-07-09 19:51:45 -07:00
remote_clusters Add doc titles to ES UI apps (#71045) 2020-07-21 07:04:40 -07:00
reporting Use server basepath when creating reporting jobs (#72722) 2020-07-22 08:05:53 -05:00
rollup Add doc titles to ES UI apps (#71045) 2020-07-21 07:04:40 -07:00
searchprofiler Fix a11y keyboard overlay (#71214) 2020-07-10 12:40:30 +02:00
security Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
security_solution Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
snapshot_restore Add doc titles to ES UI apps (#71045) 2020-07-21 07:04:40 -07:00
spaces Management API - simpler interface, remove app context usage (#71144) 2020-07-14 11:30:01 -05:00
task_manager [Task Manager] Addresses flaky test introduced by buffered store (#72815) 2020-07-22 13:39:33 +01:00
telemetry_collection_xpack add policy details and update SO limit requests (#71789) 2020-07-15 09:36:48 -04:00
transform [ML] do not throw an error when agg is not supported by UI (#72685) 2020-07-22 01:03:27 +02:00
translations [Lens] Legend config (#70619) 2020-07-22 12:14:59 +02:00
triggers_actions_ui Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
ui_actions_enhanced [kbn/optimizer] implement "requiredBundles" property of KP plugins (#70911) 2020-07-09 18:43:17 -07:00
upgrade_assistant Add doc titles to ES UI apps (#71045) 2020-07-21 07:04:40 -07:00
uptime Adds Role Based Access-Control to the Alerting & Action plugins based on Kibana Feature Controls (#67157) 2020-07-22 14:45:57 +01:00
watcher Add doc titles to ES UI apps (#71045) 2020-07-21 07:04:40 -07:00