Skip to content

[Security Solution] Adds check for license level for rule editing callout message#213995

Merged
banderror merged 1 commit intoelastic:mainfrom
dplumlee:editing-callout-license-fix
Mar 12, 2025
Merged

[Security Solution] Adds check for license level for rule editing callout message#213995
banderror merged 1 commit intoelastic:mainfrom
dplumlee:editing-callout-license-fix

Conversation

@dplumlee
Copy link
Contributor

@dplumlee dplumlee commented Mar 11, 2025

Summary

Resolves #213983

Adds gating logic to only display the rule upgrade related warning callout on the rule editing page if the user has the appropriate license level, otherwise the message is irrelevant as the user wouldn't be able to edit a prebuilt rule in the way the message refers to

Testing

Steps to reproduce:

  1. Use a Platinum license or any tier that does not allow prebuilt rule updates.
  2. Navigate to the Rule Management page and select a prebuilt rule with an available update.
  3. Open Rule Details page -> Edit rule settings
  4. Observe the callout message is not displayed at the top of the page

NOTE: When using the enterprise license, the callout should still be displayed

@dplumlee dplumlee added bug Fixes for quality problems that affect the customer experience release_note:skip Skip the PR/issue when compiling release notes v9.0.0 Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Detection Rule Management Security Detection Rule Management Team Feature:Prebuilt Detection Rules Security Solution Prebuilt Detection Rules area backport:version Backport to applied version labels v8.18.0 v9.1.0 v8.19.0 labels Mar 11, 2025
@dplumlee dplumlee self-assigned this Mar 11, 2025
@dplumlee dplumlee requested a review from a team as a code owner March 11, 2025 19:00
@dplumlee dplumlee requested a review from dhurley14 March 11, 2025 19:00
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detections-response (Team:Detections and Resp)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

@elasticmachine
Copy link
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

Test Failures

  • [job] [logs] FTR Configs #108 / @ess @serverless @serverlessQA SecuritySolution Timeline Timeline @skipInServerless resolve timeline "before all" hook for "should return outcome exactMatch when the id is unchanged"

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 8.9MB 8.9MB +3.0B

cc @dplumlee

Copy link
Contributor

@maximpn maximpn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested the PR locally. I can confirm the callout isn't shown on rule's editing page with insufficient license.

@banderror banderror merged commit 0485578 into elastic:main Mar 12, 2025
32 checks passed
@kibanamachine
Copy link
Contributor

Starting backport for target branches: 8.18, 8.x, 9.0

https://github.com/elastic/kibana/actions/runs/13814649402

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Mar 12, 2025
…lout message (elastic#213995)

## Summary

Resolves elastic#213983

Adds gating logic to only display the rule upgrade related warning
callout on the rule editing page if the user has the appropriate license
level, otherwise the message is irrelevant as the user wouldn't be able
to edit a prebuilt rule in the way the message refers to

### Testing

**Steps to reproduce:**

1. Use a Platinum license or any tier that does not allow prebuilt rule
updates.
2. Navigate to the Rule Management page and select a prebuilt rule with
an available update.
3. Open Rule Details page -> Edit rule settings
4. Observe the callout message is not displayed at the top of the page

NOTE: When using the enterprise license, the callout should still be
displayed

(cherry picked from commit 0485578)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Mar 12, 2025
…lout message (elastic#213995)

## Summary

Resolves elastic#213983

Adds gating logic to only display the rule upgrade related warning
callout on the rule editing page if the user has the appropriate license
level, otherwise the message is irrelevant as the user wouldn't be able
to edit a prebuilt rule in the way the message refers to

### Testing

**Steps to reproduce:**

1. Use a Platinum license or any tier that does not allow prebuilt rule
updates.
2. Navigate to the Rule Management page and select a prebuilt rule with
an available update.
3. Open Rule Details page -> Edit rule settings
4. Observe the callout message is not displayed at the top of the page

NOTE: When using the enterprise license, the callout should still be
displayed

(cherry picked from commit 0485578)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Mar 12, 2025
…lout message (elastic#213995)

## Summary

Resolves elastic#213983

Adds gating logic to only display the rule upgrade related warning
callout on the rule editing page if the user has the appropriate license
level, otherwise the message is irrelevant as the user wouldn't be able
to edit a prebuilt rule in the way the message refers to

### Testing

**Steps to reproduce:**

1. Use a Platinum license or any tier that does not allow prebuilt rule
updates.
2. Navigate to the Rule Management page and select a prebuilt rule with
an available update.
3. Open Rule Details page -> Edit rule settings
4. Observe the callout message is not displayed at the top of the page

NOTE: When using the enterprise license, the callout should still be
displayed

(cherry picked from commit 0485578)
@kibanamachine
Copy link
Contributor

💚 All backports created successfully

Status Branch Result
8.18
8.x
9.0

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

@dplumlee dplumlee deleted the editing-callout-license-fix branch March 12, 2025 16:45
kibanamachine added a commit that referenced this pull request Mar 12, 2025
…ng callout message (#213995) (#214199)

# Backport

This will backport the following commits from `main` to `9.0`:
- [[Security Solution] Adds check for license level for rule editing
callout message
(#213995)](#213995)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Davis
Plumlee","email":"56367316+dplumlee@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-12T15:03:38Z","message":"[Security
Solution] Adds check for license level for rule editing callout message
(#213995)\n\n## Summary\n\nResolves
https://github.com/elastic/kibana/issues/213983\n\nAdds gating logic to
only display the rule upgrade related warning\ncallout on the rule
editing page if the user has the appropriate license\nlevel, otherwise
the message is irrelevant as the user wouldn't be able\nto edit a
prebuilt rule in the way the message refers to\n\n### Testing\n\n**Steps
to reproduce:**\n\n1. Use a Platinum license or any tier that does not
allow prebuilt rule\nupdates.\n2. Navigate to the Rule Management page
and select a prebuilt rule with\nan available update.\n3. Open Rule
Details page -> Edit rule settings\n4. Observe the callout message is
not displayed at the top of the page\n\nNOTE: When using the enterprise
license, the callout should still
be\ndisplayed","sha":"0485578022006a183c5d0db1dd3a404ba2bff015","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","v9.0.0","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Prebuilt Detection
Rules","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security
Solution] Adds check for license level for rule editing callout
message","number":213995,"url":"https://github.com/elastic/kibana/pull/213995","mergeCommit":{"message":"[Security
Solution] Adds check for license level for rule editing callout message
(#213995)\n\n## Summary\n\nResolves
https://github.com/elastic/kibana/issues/213983\n\nAdds gating logic to
only display the rule upgrade related warning\ncallout on the rule
editing page if the user has the appropriate license\nlevel, otherwise
the message is irrelevant as the user wouldn't be able\nto edit a
prebuilt rule in the way the message refers to\n\n### Testing\n\n**Steps
to reproduce:**\n\n1. Use a Platinum license or any tier that does not
allow prebuilt rule\nupdates.\n2. Navigate to the Rule Management page
and select a prebuilt rule with\nan available update.\n3. Open Rule
Details page -> Edit rule settings\n4. Observe the callout message is
not displayed at the top of the page\n\nNOTE: When using the enterprise
license, the callout should still
be\ndisplayed","sha":"0485578022006a183c5d0db1dd3a404ba2bff015"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/213995","number":213995,"mergeCommit":{"message":"[Security
Solution] Adds check for license level for rule editing callout message
(#213995)\n\n## Summary\n\nResolves
https://github.com/elastic/kibana/issues/213983\n\nAdds gating logic to
only display the rule upgrade related warning\ncallout on the rule
editing page if the user has the appropriate license\nlevel, otherwise
the message is irrelevant as the user wouldn't be able\nto edit a
prebuilt rule in the way the message refers to\n\n### Testing\n\n**Steps
to reproduce:**\n\n1. Use a Platinum license or any tier that does not
allow prebuilt rule\nupdates.\n2. Navigate to the Rule Management page
and select a prebuilt rule with\nan available update.\n3. Open Rule
Details page -> Edit rule settings\n4. Observe the callout message is
not displayed at the top of the page\n\nNOTE: When using the enterprise
license, the callout should still
be\ndisplayed","sha":"0485578022006a183c5d0db1dd3a404ba2bff015"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Davis Plumlee <56367316+dplumlee@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request Mar 12, 2025
…ng callout message (#213995) (#214198)

# Backport

This will backport the following commits from `main` to `8.x`:
- [[Security Solution] Adds check for license level for rule editing
callout message
(#213995)](#213995)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Davis
Plumlee","email":"56367316+dplumlee@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-12T15:03:38Z","message":"[Security
Solution] Adds check for license level for rule editing callout message
(#213995)\n\n## Summary\n\nResolves
https://github.com/elastic/kibana/issues/213983\n\nAdds gating logic to
only display the rule upgrade related warning\ncallout on the rule
editing page if the user has the appropriate license\nlevel, otherwise
the message is irrelevant as the user wouldn't be able\nto edit a
prebuilt rule in the way the message refers to\n\n### Testing\n\n**Steps
to reproduce:**\n\n1. Use a Platinum license or any tier that does not
allow prebuilt rule\nupdates.\n2. Navigate to the Rule Management page
and select a prebuilt rule with\nan available update.\n3. Open Rule
Details page -> Edit rule settings\n4. Observe the callout message is
not displayed at the top of the page\n\nNOTE: When using the enterprise
license, the callout should still
be\ndisplayed","sha":"0485578022006a183c5d0db1dd3a404ba2bff015","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","v9.0.0","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Prebuilt Detection
Rules","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security
Solution] Adds check for license level for rule editing callout
message","number":213995,"url":"https://github.com/elastic/kibana/pull/213995","mergeCommit":{"message":"[Security
Solution] Adds check for license level for rule editing callout message
(#213995)\n\n## Summary\n\nResolves
https://github.com/elastic/kibana/issues/213983\n\nAdds gating logic to
only display the rule upgrade related warning\ncallout on the rule
editing page if the user has the appropriate license\nlevel, otherwise
the message is irrelevant as the user wouldn't be able\nto edit a
prebuilt rule in the way the message refers to\n\n### Testing\n\n**Steps
to reproduce:**\n\n1. Use a Platinum license or any tier that does not
allow prebuilt rule\nupdates.\n2. Navigate to the Rule Management page
and select a prebuilt rule with\nan available update.\n3. Open Rule
Details page -> Edit rule settings\n4. Observe the callout message is
not displayed at the top of the page\n\nNOTE: When using the enterprise
license, the callout should still
be\ndisplayed","sha":"0485578022006a183c5d0db1dd3a404ba2bff015"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/213995","number":213995,"mergeCommit":{"message":"[Security
Solution] Adds check for license level for rule editing callout message
(#213995)\n\n## Summary\n\nResolves
https://github.com/elastic/kibana/issues/213983\n\nAdds gating logic to
only display the rule upgrade related warning\ncallout on the rule
editing page if the user has the appropriate license\nlevel, otherwise
the message is irrelevant as the user wouldn't be able\nto edit a
prebuilt rule in the way the message refers to\n\n### Testing\n\n**Steps
to reproduce:**\n\n1. Use a Platinum license or any tier that does not
allow prebuilt rule\nupdates.\n2. Navigate to the Rule Management page
and select a prebuilt rule with\nan available update.\n3. Open Rule
Details page -> Edit rule settings\n4. Observe the callout message is
not displayed at the top of the page\n\nNOTE: When using the enterprise
license, the callout should still
be\ndisplayed","sha":"0485578022006a183c5d0db1dd3a404ba2bff015"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Davis Plumlee <56367316+dplumlee@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request Mar 12, 2025
…ing callout message (#213995) (#214197)

# Backport

This will backport the following commits from `main` to `8.18`:
- [[Security Solution] Adds check for license level for rule editing
callout message
(#213995)](#213995)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Davis
Plumlee","email":"56367316+dplumlee@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-03-12T15:03:38Z","message":"[Security
Solution] Adds check for license level for rule editing callout message
(#213995)\n\n## Summary\n\nResolves
https://github.com/elastic/kibana/issues/213983\n\nAdds gating logic to
only display the rule upgrade related warning\ncallout on the rule
editing page if the user has the appropriate license\nlevel, otherwise
the message is irrelevant as the user wouldn't be able\nto edit a
prebuilt rule in the way the message refers to\n\n### Testing\n\n**Steps
to reproduce:**\n\n1. Use a Platinum license or any tier that does not
allow prebuilt rule\nupdates.\n2. Navigate to the Rule Management page
and select a prebuilt rule with\nan available update.\n3. Open Rule
Details page -> Edit rule settings\n4. Observe the callout message is
not displayed at the top of the page\n\nNOTE: When using the enterprise
license, the callout should still
be\ndisplayed","sha":"0485578022006a183c5d0db1dd3a404ba2bff015","branchLabelMapping":{"^v9.1.0$":"main","^v8.19.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["bug","release_note:skip","v9.0.0","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Prebuilt Detection
Rules","backport:version","v8.18.0","v9.1.0","v8.19.0"],"title":"[Security
Solution] Adds check for license level for rule editing callout
message","number":213995,"url":"https://github.com/elastic/kibana/pull/213995","mergeCommit":{"message":"[Security
Solution] Adds check for license level for rule editing callout message
(#213995)\n\n## Summary\n\nResolves
https://github.com/elastic/kibana/issues/213983\n\nAdds gating logic to
only display the rule upgrade related warning\ncallout on the rule
editing page if the user has the appropriate license\nlevel, otherwise
the message is irrelevant as the user wouldn't be able\nto edit a
prebuilt rule in the way the message refers to\n\n### Testing\n\n**Steps
to reproduce:**\n\n1. Use a Platinum license or any tier that does not
allow prebuilt rule\nupdates.\n2. Navigate to the Rule Management page
and select a prebuilt rule with\nan available update.\n3. Open Rule
Details page -> Edit rule settings\n4. Observe the callout message is
not displayed at the top of the page\n\nNOTE: When using the enterprise
license, the callout should still
be\ndisplayed","sha":"0485578022006a183c5d0db1dd3a404ba2bff015"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","8.18","8.x"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.18","label":"v8.18.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/213995","number":213995,"mergeCommit":{"message":"[Security
Solution] Adds check for license level for rule editing callout message
(#213995)\n\n## Summary\n\nResolves
https://github.com/elastic/kibana/issues/213983\n\nAdds gating logic to
only display the rule upgrade related warning\ncallout on the rule
editing page if the user has the appropriate license\nlevel, otherwise
the message is irrelevant as the user wouldn't be able\nto edit a
prebuilt rule in the way the message refers to\n\n### Testing\n\n**Steps
to reproduce:**\n\n1. Use a Platinum license or any tier that does not
allow prebuilt rule\nupdates.\n2. Navigate to the Rule Management page
and select a prebuilt rule with\nan available update.\n3. Open Rule
Details page -> Edit rule settings\n4. Observe the callout message is
not displayed at the top of the page\n\nNOTE: When using the enterprise
license, the callout should still
be\ndisplayed","sha":"0485578022006a183c5d0db1dd3a404ba2bff015"}},{"branch":"8.x","label":"v8.19.0","branchLabelMappingKey":"^v8.19.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Davis Plumlee <56367316+dplumlee@users.noreply.github.com>
CAWilson94 pushed a commit to CAWilson94/kibana that referenced this pull request Mar 22, 2025
…lout message (elastic#213995)

## Summary

Resolves elastic#213983

Adds gating logic to only display the rule upgrade related warning
callout on the rule editing page if the user has the appropriate license
level, otherwise the message is irrelevant as the user wouldn't be able
to edit a prebuilt rule in the way the message refers to

### Testing

**Steps to reproduce:**

1. Use a Platinum license or any tier that does not allow prebuilt rule
updates.
2. Navigate to the Rule Management page and select a prebuilt rule with
an available update.
3. Open Rule Details page -> Edit rule settings
4. Observe the callout message is not displayed at the top of the page

NOTE: When using the enterprise license, the callout should still be
displayed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:version Backport to applied version labels bug Fixes for quality problems that affect the customer experience Feature:Prebuilt Detection Rules Security Solution Prebuilt Detection Rules area release_note:skip Skip the PR/issue when compiling release notes Team:Detection Rule Management Security Detection Rule Management Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. v8.18.0 v8.19.0 v9.0.0 v9.1.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Security Solution] Incorrect Callout Displayed for Prebuilt Rule Updates on Restricted License or Tiers

6 participants