Skip to content

[Security Solution][Endpoint] Adds RBAC API checks for event filters#144009

Merged
dasansol92 merged 2 commits intoelastic:mainfrom
dasansol92:feat/olm-event_filters_RBAC_API-4922
Oct 27, 2022
Merged

[Security Solution][Endpoint] Adds RBAC API checks for event filters#144009
dasansol92 merged 2 commits intoelastic:mainfrom
dasansol92:feat/olm-event_filters_RBAC_API-4922

Conversation

@dasansol92
Copy link
Contributor

Summary

For maintainers

@dasansol92 dasansol92 added release_note:skip Skip the PR/issue when compiling release notes backport:skip This PR does not require backporting Team:Defend Workflows “EDR Workflows” sub-team of Security Solution v8.6.0 labels Oct 26, 2022
@dasansol92 dasansol92 marked this pull request as ready for review October 26, 2022 12:58
@dasansol92 dasansol92 requested a review from a team as a code owner October 26, 2022 12:58
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-onboarding-and-lifecycle-mgt (Team:Onboarding and Lifecycle Mgt)

Copy link
Member

@joeypoon joeypoon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🙆‍♂️

@dasansol92 dasansol92 changed the title Adds RBAC API checks for event filters [Security Solution][Endpoint] Adds RBAC API checks for event filters Oct 26, 2022
@dasansol92
Copy link
Contributor Author

@elasticmachine merge upstream

@kibana-ci
Copy link

💚 Build Succeeded

Metrics [docs]

✅ unchanged

History

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

Copy link
Contributor

@gergoabraham gergoabraham left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! 🎉

I've tested it, and was able to check it with reading the event filter list, receiving 403 when privilege is taken.
image

Copy link
Contributor

@gergoabraham gergoabraham left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I just checked it with creating a new filter, and was able with read permission - please don't merge yet, I need to double check

Copy link
Contributor

@gergoabraham gergoabraham left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

My mistake, everything works great. 👍

@dasansol92 dasansol92 merged commit 028fa94 into elastic:main Oct 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:skip This PR does not require backporting release_note:skip Skip the PR/issue when compiling release notes Team:Defend Workflows “EDR Workflows” sub-team of Security Solution v8.6.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants