-
Notifications
You must be signed in to change notification settings - Fork 8.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Create privilege action to allow for decrypted telemetry payload #96571
Conversation
Pinging @elastic/kibana-security (Team:Security) |
@elasticmachine merge upstream |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
@elasticmachine merge upstream |
@elasticmachine merge upstream |
@elasticmachine merge upstream |
💛 Build succeeded, but was flaky
Test FailuresKibana Pipeline / general / Chrome X-Pack UI Functional Tests.x-pack/test/functional/apps/visualize/feature_controls/visualize_security·ts.Visualize visualize feature controls security global visualize all privileges can view existing VisualizationStandard Out
Stack Trace
Metrics [docs]
History
To update your PR or re-run it, just comment with: |
…stic#96571) Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
💚 Backport successful
This backport PR will be merged automatically after passing CI. |
) (#98059) Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com> Co-authored-by: Larry Gregory <larry.gregory@elastic.co>
…stic#96571) Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Summary
Adds a new
decryptedTelemetry
privilege action to signal to API endpoints that the user should be able to receive the decrypted telemetry payload.This action is granted to the "Global All" and "Global Read" privileges.
This is only a partial check, as the user will also need cluster privileges in order to access certain information. That part is out of scope for this PR, and will be addressed in a followup.
This action is not consumed by anything at the moment, but is merely a piece of prep work to simplify the telemetry endpoints.
Related #96536
Related #95143
Related #96538