Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Fleet]: User is able to create policy with Collect system logs and metrics enabled with user role Integrations: Read. #205468

Open
amolnater-qasource opened this issue Jan 3, 2025 · 3 comments
Labels
bug Fixes for quality problems that affect the customer experience impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. Team:Fleet Team label for Observability Data Collection Fleet team

Comments

@amolnater-qasource
Copy link

Kibana Build details:

VERSION: 8.18.0 SNAPSHOT
BUILD: 81372
COMMIT: 2b68edac50a036040cbdaf0f14030d39d39da677

Role:
"Security Space"

Integrations: Read
Fleet: All
Agents: All
Agent policies: All
Settings: All

Image

Preconditions:

  1. 8.18.0-SNAPSHOT Kibana cloud environment should be available.
  2. New User should be created with above defined role.

Steps to reproduce:

  1. Login with the above user.
  2. Navigate to Fleet>Agent policies tab.
  3. Click any policy and observe Add integration button is disabled.
  4. Now navigate back to Agent policies tab and click Create agent policy.
  5. Make sure Collect system logs and metrics remains enabled.
  6. Click create policy and observe System integration is added to the agent policy with user role Integrations: Read.

Expected Result:
User should not be able to create policy with Collect system logs and metrics enabled with user role Integrations: Read.

Screen Recording:

Agent.policies.-.Fleet.-.Elastic.-.Google.Chrome.2025-01-03.11-17-52.mp4

Feature:
https://github.com/elastic/ingest-dev/issues/2903

@amolnater-qasource amolnater-qasource added bug Fixes for quality problems that affect the customer experience impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. Team:Fleet Team label for Observability Data Collection Fleet team labels Jan 3, 2025
@elasticmachine
Copy link
Contributor

Pinging @elastic/fleet (Team:Fleet)

@amolnater-qasource
Copy link
Author

@muskangulati-qasource Please review.

@muskangulati-qasource
Copy link

Secondary review is Done for this ticket!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. Team:Fleet Team label for Observability Data Collection Fleet team
Projects
None yet
Development

No branches or pull requests

3 participants