Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Synthetics] [Serverless] Params not able to be viewed by any user role in serverless #200479

Open
dominiqueclarke opened this issue Nov 18, 2024 · 3 comments
Assignees
Labels
bug Fixes for quality problems that affect the customer experience Team:obs-ux-management Observability Management User Experience Team v8.17.0

Comments

@dominiqueclarke
Copy link
Contributor

dominiqueclarke commented Nov 18, 2024

Synthetics params can be written by users with Kibana Uptime/Synthetics ALL privileges, but param values can only read by users with specific roles.

In stateful, param values can only be read by users with kibana_admin or superuser role. However, in serverless, currently no user is able to view params.

Users on serverless oblt projects fall into three categories admin, editor and viewer. Only admin users should be able to read params values. Currently, even admin users cannot view params.

Update the logic so that admin users in oblt serverless projects are able to read param values.

admin is not a reserved role name in stateful. Therefore, any logic will need to specifically check if we're running in serverless before allowing the admin role to access read params privileges.

@dominiqueclarke dominiqueclarke added bug Fixes for quality problems that affect the customer experience Team:obs-ux-management Observability Management User Experience Team v8.17.0 labels Nov 18, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/obs-ux-management-team (Team:obs-ux-management)

@dominiqueclarke dominiqueclarke changed the title [Synthetics] [Serverless] Params not able to be viewed by any users in serverless [Synthetics] [Serverless] Params not able to be viewed by any user role in serverless Nov 18, 2024
@jasonrhodes
Copy link
Member

I saw some issues last week around this, is this still an unfixed problem we need to address? cc: @shahzad31 @andrewvc

@dominiqueclarke dominiqueclarke self-assigned this Nov 25, 2024
@andrewvc
Copy link
Contributor

andrewvc commented Dec 4, 2024

Per a side convo in slack, I think we should also allow editors to be able to view params. My understanding is that this aligns with kibana product security, is that right @dominiqueclarke ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience Team:obs-ux-management Observability Management User Experience Team v8.17.0
Projects
None yet
Development

No branches or pull requests

4 participants