[Security Solution][Entity Analytics][UI] Adding code to check privileges for enabling the Run Engine button by abhishekbhatia1710 · Pull Request #213054 · elastic/kibana

abhishekbhatia1710 · 2025-03-04T09:55:49Z

Summary

What: Updated the EntityAnalyticsManagementPage component to enhance user privilege checks and disable the "Run Engine" button when necessary conditions are not met.

Why: To improve UI/UX by preventing users from attempting actions they don’t have the required privileges for, ensuring a clearer user experience by displaying errors when required.

Test Steps

Open Kibana and enable the risk engine
Create a user with no cluster privileges
Login with the no-privileges user
- Go to the Entity Risk Score page
- The Run Engine button should be disabled.
Login now with the "elastic" user.
- Go to the Entity Risk Score page
- The Run Engine button should be enabled
- Clicking the Run Engine button should update the countdown text to 'Now running' and
  disable the button.

Screenshots

The "Run Engine" button is enabled, but an error is displayed, and the `scheduleRiskEngine` API call is not triggered.

cluster privileges

The "Run Engine" button is disabled because the user lacks the required privileges.

User with all the privileges

Run Engine button is disabled when countdown text shows "Now running" (for admin user)

Screen.Recording.2025-03-21.at.3.04.16.PM.mov

Run Engine button is disabled when countdown text shows "Now running" (for user without `manage_index_templates` privilege)

Screen.Recording.2025-03-21.at.3.03.08.PM.mov

Checklist

Check the PR satisfies following conditions.

Reviewers should verify this PR satisfies this list as well.

Any text added follows EUI's writing guidelines, uses sentence case text and includes i18n support
The PR description includes the appropriate Release Notes section, and the correct release_note:* label is applied per the guidelines

elasticmachine · 2025-03-04T09:55:52Z

Pinging @elastic/security-entity-analytics (Team:Entity Analytics)

...plugins/security_solution/public/entity_analytics/pages/entity_analytics_management_page.tsx

…ps://github.com/abhishekbhatia1710/kibana into ea-12016-privileges-check-for-run-engine-button

abhishekbhatia1710 · 2025-03-21T09:48:50Z

I've updated the logic to disable the 'Run Engine' button when the countdown text displays 'Now running.'

Attached are the screenshots, along with testing steps detailed in the PR description.

.../plugins/security_solution/server/lib/entity_analytics/risk_engine/risk_engine_privileges.ts

Using different methods for enable and run risk engine for privilege check

.../plugins/security_solution/server/lib/entity_analytics/risk_engine/risk_engine_privileges.ts

...plugins/security_solution/public/entity_analytics/pages/entity_analytics_management_page.tsx

hop-dev

Please see comments 👍

machadoum

I desk-tested!

The only issue I noticed is UX related and could be addressed later:

Placing dynamic text and a loader next to a button, on a right-aligned design, is a bad pattern. The text and loader vary in size, which makes the button move. That makes it harder to click and creates a confusing user experience.

Apr-25-2025.14-52-11.mov

Mark reviewed already, hence dismissing (with his blessing, ofcourse)

kibanamachine · 2025-04-29T13:49:37Z

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create automatically backports add a backport:* label or prevent reminders by adding the backport:skip label.
You can also create backports manually by running node scripts/backport --pr 213054 locally
cc: @abhishekbhatia1710

kibanamachine · 2025-04-30T14:48:42Z

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create automatically backports add a backport:* label or prevent reminders by adding the backport:skip label.
You can also create backports manually by running node scripts/backport --pr 213054 locally
cc: @abhishekbhatia1710

kibanamachine · 2025-05-01T15:48:40Z

Friendly reminder: Looks like this PR hasn’t been backported yet.
To create automatically backports add a backport:* label or prevent reminders by adding the backport:skip label.
You can also create backports manually by running node scripts/backport --pr 213054 locally
cc: @abhishekbhatia1710

abhishekbhatia1710 · 2025-05-02T07:10:56Z

💚 All backports created successfully

Status	Branch	Result
✅	9.0
✅	8.19
✅	8.18

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

…eges for enabling the Run Engine button (elastic#213054) ## Summary **What:** Updated the `EntityAnalyticsManagementPage` component to enhance user privilege checks and disable the "Run Engine" button when necessary conditions are not met. **Why:** To improve UI/UX by preventing users from attempting actions they don’t have the required privileges for, ensuring a clearer user experience by displaying errors when required. ## Test Steps - Open Kibana and enable the risk engine - Create a user with no cluster privileges - Login with the no-privileges user - Go to the Entity Risk Score page - The Run Engine button should be disabled. - Login now with the "elastic" user. - Go to the Entity Risk Score page - The Run Engine button should be enabled - Clicking the Run Engine button should update the countdown text to 'Now running' and disable the button. ## Screenshots ### The "Run Engine" button is enabled, but an error is displayed, and the `scheduleRiskEngine` API call is not triggered. ![Screenshot 2025-03-04 at 3 13 55 PM](https://github.com/user-attachments/assets/43b772d8-4782-45b8-93b2-9dec2af02c30)cluster privileges ### The "Run Engine" button is disabled because the user lacks the required privileges. ![Screenshot 2025-03-04 at 3 04 22 PM](https://github.com/user-attachments/assets/812653ec-d8db-4e7b-87f1-596e3eb8845c) ### User with all the privileges ![Screenshot 2025-03-04 at 3 17 38 PM](https://github.com/user-attachments/assets/82b7f5bc-438d-489c-a56e-13b1eb63acbf) ### Run Engine button is disabled when countdown text shows "Now running" (for admin user) https://github.com/user-attachments/assets/8d1279f1-6d4c-44b2-b7a8-75e5114af73b ### Run Engine button is disabled when countdown text shows "Now running" (for user without `manage_index_templates` privilege) https://github.com/user-attachments/assets/bb207a23-ae0a-4eb9-8400-ea023a47bb4c ### Checklist Check the PR satisfies following conditions. Reviewers should verify this PR satisfies this list as well. - [x] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md) - [x] The PR description includes the appropriate Release Notes section, and the correct `release_note:*` label is applied per the [guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process) (cherry picked from commit 12c3433)

kibanamachine · 2025-05-02T16:48:34Z