privilege requirement for session_view and kubernetes dashboard routes

elastic · Nov 13, 2024 · ded55a7 · ded55a7
1 parent 234681b
commit ded55a7
Show file tree

Hide file tree

Showing 7 changed files with 7 additions and 14 deletions.
diff --git a/x-pack/plugins/kubernetes_security/server/routes/aggregate.ts b/x-pack/plugins/kubernetes_security/server/routes/aggregate.ts
@@ -40,8 +40,7 @@ export const registerAggregateRoute = (router: IRouter, logger: Logger) => {
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/kubernetes_security/server/routes/count.ts b/x-pack/plugins/kubernetes_security/server/routes/count.ts
@@ -30,8 +30,7 @@ export const registerCountRoute = (router: IRouter, logger: Logger) => {
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/kubernetes_security/server/routes/multi_terms_aggregate.ts b/x-pack/plugins/kubernetes_security/server/routes/multi_terms_aggregate.ts
@@ -37,8 +37,7 @@ export const registerMultiTermsAggregateRoute = (router: IRouter, logger: Logger
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/session_view/server/routes/alerts_route.ts b/x-pack/plugins/session_view/server/routes/alerts_route.ts
@@ -38,8 +38,7 @@ export const registerAlertsRoute = (
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/session_view/server/routes/get_total_io_bytes_route.ts b/x-pack/plugins/session_view/server/routes/get_total_io_bytes_route.ts
@@ -24,8 +24,7 @@ export const registerGetTotalIOBytesRoute = (router: IRouter, logger: Logger) =>
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/session_view/server/routes/io_events_route.ts b/x-pack/plugins/session_view/server/routes/io_events_route.ts
@@ -31,8 +31,7 @@ export const registerIOEventsRoute = (router: IRouter, logger: Logger) => {
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/session_view/server/routes/process_events_route.ts b/x-pack/plugins/session_view/server/routes/process_events_route.ts
@@ -45,8 +45,7 @@ export const registerProcessEventsRoute = (
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {