Skip to content

[7.x] [Security Solution] [Detections] Adds scripts to create users + roles based on specific privileges (#81866)#83861

Merged
dhurley14 merged 1 commit intoelastic:7.xfrom
dhurley14:backport/7.x/pr-81866
Nov 19, 2020
Merged

[7.x] [Security Solution] [Detections] Adds scripts to create users + roles based on specific privileges (#81866)#83861
dhurley14 merged 1 commit intoelastic:7.xfrom
dhurley14:backport/7.x/pr-81866

Conversation

@dhurley14
Copy link
Copy Markdown
Contributor

Backports the following commits to 7.x:

… based on specific privileges (elastic#81866)

* shell scripts for creating roles + users for testing

* update readme's and updated privilege requirements based on testing with the users and inferring what the roles are supposed to do

* update role privileges based on feedback meeting yesterday

* updated scripts to accept filepath to role / user, added a test to ensure upload value list button is disabled

* updated role scripts to be parameterized

* adds login with role function and adds a sample test with a role to test that a t1 analyst user cannot upload a value list

* add object with corresponding roles

* fix spacing

* parameterize urls for basic auth with roles + users

* forgot to change the cy.visit string

* add KIBANA_URL env var for cli runner

* add env vars for curl script execution

* second script

* update readme's for each role and remove create_index from lists privilege for the soc manager role

* remove 'manage' cluster privilege for rule author

* remove 'create_index' privilege from soc_manager role since that is not parity with the security workflows spreadsheet

* update the login function logic with glo's feedback

* replace SIEM with Security Solution in markdown files

* make role param optional not just undefined

* remove unused file

* add copyright to scripts files

* update top-level README for roles scripts

* remove reference to internal spreadsheet and reference readme for this pr

* remove unnecessary -XPOST and remove verbose mode from post_detections_user script

* adds utils for running integration tests with other users and adds two sample tests showing example usage

* minor type updates and small refactor

* fix x-pack/test types

* use enum types instead of custom type

* fix path to json

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Xavier Mouligneau <189600+XavierM@users.noreply.github.com>
@dhurley14 dhurley14 added the backport This PR is a backport of another PR label Nov 19, 2020
@kibanamachine
Copy link
Copy Markdown
Contributor

💚 Build Succeeded

Metrics [docs]

Distributable file count

id before after diff
default 43237 43280 +43

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

@dhurley14 dhurley14 merged commit 9390d4e into elastic:7.x Nov 19, 2020
@dhurley14 dhurley14 deleted the backport/7.x/pr-81866 branch November 19, 2020 23:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants