[Fleet]: Able to uninstall integration from another space even when assigned to an Agent Policy.

[harshitgupta-qasource]

Kibana Build details:

VERSION: 8.15.0 SNAPSHOT
BUILD: 75972
COMMIT: 260882e19521800317c68b29117f649a7b91ee46

Host OS: All

Preconditions:

1. 8.15.0 SNAPSHOT or above Kibana should be available.
2. Agent Policy should be created.
3. Space should be created.

Steps to reproduce:

1. Log in to the Default Space.
2. Navigate to the Integrations Tab and search for the Nginx Integration (or any integration).
3. Install the integration to a selected agent policy.
4. Now, log in to a newly created space.
5. Navigate to the Nginx integration overview page and go to the settings tab.
6. Notice that the Delete Integration button is enabled even though it is assigned to an agent policy. [Observation 1]
7. Click on Delete button.
8. Observe that user is able to uninstall integration from another space. [Observation 2]

Expected Result:

• User should not be able to uninstall integration from another space even when assigned to an Agent Policy.

Screenshot:

1. Default Space
   
   

2. Newly Created Space
   

Screen-cast

Nginx.-.Integrations.-.Elastic.Mozilla.Firefox.2024-07-05.12-07-42.mp4

Feature:
#172963

[elasticmachine]

Pinging @elastic/fleet (Team:Fleet)

[harshitgupta-qasource]

@amolnater-qasource Kindly review

[amolnater-qasource]

Secondary review for this ticket is Done.

[nchaulet]

That an interesting, we will not be able to disable that button purely client side has we used to do, as the user may not have access to all integration policies.

I think we can introduce a new key metadata in the GET package response

GET /.../nginx/{version}?withMetadata=true
{
 "item": {},
 "metadata": {
    "has_policies": true
  }
}

And disable the uninstall button based on that flag.

We should also make sure the server side validation retrieve policies accross all spaces.

[harshitgupta-qasource]

Hi Team

We have re-validated this issue on the latest 8.15.0 BC4 Kibana cloud environment and found it fixed now.

Observations:

• User is not be able to uninstall integration from another space even when assigned to an Agent Policy.

Build details:
VERSION: 8.15.0
BUILD: 76261
COMMIT: 9d62937

Screen-cast

Nginx.-.Integrations.-.Elastic.Mozilla.Firefox.2024-07-30.14-35-43.mp4

Hence, we are marking this issue as QA: Validated.

Thanks