Skip to content

Commit

Permalink
[Security Solution] Fix old siem feature override (elastic#207333)
Browse files Browse the repository at this point in the history
## Summary

Adds the feature override for the old `siem` feature as well, we changed
that to the new one here


https://github.com/elastic/kibana/pull/201780/files#diff-5aba630e58630c087c90368aa97296afb736f62579a23285cef901dc1c3921edR27

Related failure: elastic#207285

The problem happened because MKI tests are using the outdated roles
definition with the old `feature_siem` which was lacking the feature
override in the serverless.security.yml

Co-authored-by: Elastic Machine <[email protected]>
  • Loading branch information
2 people authored and cqliu1 committed Jan 21, 2025
1 parent bbd83eb commit dd9bc48
Showing 1 changed file with 27 additions and 0 deletions.
27 changes: 27 additions & 0 deletions config/serverless.security.yml
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,33 @@ xpack.features.overrides:
- feature: "maps"
privileges: [ "read" ]

### Security's feature privileges are fine-tuned to grant access to Discover, Dashboard, Maps, and Visualize apps.
siem:
privileges:
### Security's `All` feature privilege should implicitly grant `All` access to Discover, Dashboard, Maps, and
### Visualize features.
all.composedOf:
- feature: "discover"
privileges: [ "all" ]
- feature: "dashboard"
privileges: [ "all" ]
- feature: "visualize"
privileges: [ "all" ]
- feature: "maps"
privileges: [ "all" ]
# Security's `Read` feature privilege should implicitly grant `Read` access to Discover, Dashboard, Maps, and
# Visualize features. Additionally, it should implicitly grant privilege to create short URLs in Discover,
### Dashboard, and Visualize apps.
read.composedOf:
- feature: "discover"
privileges: [ "read" ]
- feature: "dashboard"
privileges: [ "read" ]
- feature: "visualize"
privileges: [ "read" ]
- feature: "maps"
privileges: [ "read" ]

## Cloud settings
xpack.cloud.serverless.project_type: security

Expand Down

0 comments on commit dd9bc48

Please sign in to comment.