[Security Solution][Endpoint] Adds new integration tests for Endpoint Artifacts API RBAC

[dasansol92]

Summary

• Add new test cases checking RBAC privileges for all artifacts integration tests

For maintainers

• This was checked for breaking API changes and was labeled appropriately

[elasticmachine]

Pinging @elastic/security-onboarding-and-lifecycle-mgt (Team:Onboarding and Lifecycle Mgt)

[dasansol92]

@elasticmachine merge upstream

[paul-tavares]

Looks good. Thank you.

I did notice something that did not appear right to me - some tests are checking for a expect(400) error. 400 errors are normally due to user input, and I would not have expected any of these tests to return a 400. Do you know why that is?

[dasansol92]

I did notice something that did not appear right to me - some tests are checking for a expect(400) error. 400 errors are normally due to user input, and I would not have expected any of these tests to return a 400. Do you know why that is?

@paul-tavares Yes, I think all expect(400) are related to user input:

• no values
• invalid OS for signer field
• more than one OS
• invalid hash
• etc.

Does that makes sense to you?

[paul-tavares]

@dasansol92 ,

Ok... Cool. thanks for that and yes, that makes sense. Did not realize we were doing schema type of validation from FTR.

👍

[kibana-ci]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: 8d4365d

Failed CI Steps

• Security Solution Tests #2

Test Failures

• [job] [logs] Security Solution Tests #2 / Import rules Imports a custom rule with exceptions

Metrics [docs]

Unknown metric groups

ESLint disabled in files

id	before	after	diff
osquery	1	2	+1

ESLint disabled line counts

id	before	after	diff
enterpriseSearch	19	21	+2
fleet	61	67	+6
osquery	109	115	+6
securitySolution	439	445	+6
total			+20

Total ESLint disabled count

id	before	after	diff
enterpriseSearch	20	22	+2
fleet	70	76	+6
osquery	110	117	+7
securitySolution	515	521	+6
total			+21

History

• 💚 Build #96263 succeeded 3f257d6
• 💔 Build #80078 failed f80e198

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

[ashokaditya]

Thanks for all the detailed tests 🔥 I have a minor suggestion but this is good to 🚢

[ashokaditya]

Don't have to change but you could use RouteMethod here instead that is imported as

import type { RouteMethod } from '@kbn/core-http-server';

[ashokaditya]

Consider updating this role to have a username and the default password so you don't have to duplicate the default password in every test. So it can be used as:

.auth(ROLE.analyst_hunter.username, ROLE.analyst_hunter.password)

[dasansol92]

Interesting, we can work on this on a subsequent pr! Thanks for the suggestion!

[ashokaditya]

The fleet side does something similar as I learned recently.