Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

elasticsearch/'actions' button accessible from machine #221

Closed
arubdesu opened this issue Mar 17, 2021 · 1 comment · Fixed by #225
Closed

elasticsearch/'actions' button accessible from machine #221

arubdesu opened this issue Mar 17, 2021 · 1 comment · Fixed by #225

Comments

@arubdesu
Copy link
Contributor

As auth to kibana is likely to get separated from only proxied by zentral, RBAC restricting the link for a machine events from its main details page (or the machine-specific events page) should result in removing that Elasticsearch button entirely. Likewise with nothing available from the Actions button it should not be visible in the interface, to avoid this:
image

np5 added a commit that referenced this issue Mar 17, 2021
@np5 np5 closed this as completed in #225 Mar 17, 2021
@np5
Copy link
Member

np5 commented Mar 17, 2021

add the events_url_authorized_groups key in each store config:

Example:

{"stores": {
    "elasticsearch": {
      "frontend": true,
      "backend": "zentral.core.stores.backends.elasticsearch",
      "events_url_authorized_groups": ["Test", "YOLO"],
      "hosts": [
        "http://elastic:9200"
      ],
      "index": "zentral-events",
      "kibana_base_url": "https://zaio.example.com/kibana/",
      "kibana_index_pattern_uuid": "zentral-events-index-pattern"
    }
 }}

If absent, all stores buttons will be displayed. If superuser too. If present, group membership will be checked.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants