[Observability][RAC] Users need view_index_metadata index privilege to view fields on Alerts page #133060
Closed
Labels
bug
Fixes for quality problems that affect the customer experience
Feature:Observability RAC
Team:ResponseOps
Label for the ResponseOps team (formerly the Cases and Alerting teams)
Kibana version:
8.x (all versions)
Elasticsearch version:
8.x (all versions)
Original install method (e.g. download page, yum, from source, etc.):
ALL
Describe the bug:
When using a restricted role, the user is unable to see the fields in the fields selector on the Alerts page
Steps to reproduce:
test_role
to matchtest_role
Expected behavior:
You shouldn't need special permissions on the
.alert*
index pattern to select fields. The work around is to addview_index_metadata
to the.alerts*
pattern for the role.Any additional context:
Here is the call that is populating the fields.
kibana/x-pack/plugins/observability/public/pages/alerts/containers/alerts_page/alerts_page.tsx
Lines 160 to 163 in e74afc4
This needs to be changed to use a query that is called by
asInternalUser
which is only available on the server. We should probably create a search strategy to generate dynamic index patterns similar to theindex_fields
search strategy from thetimelines
plugin.The text was updated successfully, but these errors were encountered: