Access for license and serverless

elastic · Aug 3, 2023 · 96b6ddc · 96b6ddc
1 parent c77a82e
commit 96b6ddc
Show file tree

Hide file tree

Showing 7 changed files with 52 additions and 26 deletions.
diff --git a/x-pack/plugins/security_solution/cypress/tasks/api_calls/risk_engine.ts b/x-pack/plugins/security_solution/cypress/tasks/api_calls/risk_engine.ts
@@ -23,3 +23,24 @@ export const deleteConfiguration = () => {
     }
   });
 };
+
+export const interceptRiskPreviewError = () => {
+  cy.intercept('POST', '/internal/risk_score/preview', {
+    statusCode: 500,
+  });
+};
+
+export const interceptRiskPreviewSuccess = () => {
+  cy.intercept('POST', '/internal/risk_score/preview', {
+    statusCode: 200,
+    body: {
+      scores: { host: [], user: [] },
+    },
+  });
+};
+
+export const interceptRiskInitError = () => {
+  cy.intercept('POST', '/internal/risk_score/engine/init', {
+    statusCode: 500,
+  });
+};
diff --git a/...gins/security_solution/public/explore/hosts/pages/navigation/host_risk_score_tab_body.tsx b/...gins/security_solution/public/explore/hosts/pages/navigation/host_risk_score_tab_body.tsx
@@ -128,23 +128,21 @@ export const HostRiskScoreQueryTabBody = ({
   }
 
   return (
-    <>
-      <HostRiskScoreTableManage
-        deleteQuery={deleteQuery}
-        data={data ?? []}
-        id={HostRiskScoreQueryId.HOSTS_BY_RISK}
-        inspect={inspect}
-        isInspect={isInspected}
-        loading={loading || isKpiLoading}
-        loadPage={noop} // It isn't necessary because PaginatedTable updates redux store and we load the page when activePage updates on the store
-        refetch={refetch}
-        setQuery={setQuery}
-        setQuerySkip={setQuerySkip}
-        severityCount={severityCount ?? EMPTY_SEVERITY_COUNT}
-        totalCount={totalCount}
-        type={type}
-      />
-    </>
+    <HostRiskScoreTableManage
+      deleteQuery={deleteQuery}
+      data={data ?? []}
+      id={HostRiskScoreQueryId.HOSTS_BY_RISK}
+      inspect={inspect}
+      isInspect={isInspected}
+      loading={loading || isKpiLoading}
+      loadPage={noop} // It isn't necessary because PaginatedTable updates redux store and we load the page when activePage updates on the store
+      refetch={refetch}
+      setQuery={setQuery}
+      setQuerySkip={setQuerySkip}
+      severityCount={severityCount ?? EMPTY_SEVERITY_COUNT}
+      totalCount={totalCount}
+      type={type}
+    />
   );
 };
 

diff --git a/x-pack/plugins/security_solution/public/management/links.ts b/x-pack/plugins/security_solution/public/management/links.ts
@@ -49,7 +49,8 @@ import { IconPipeline } from '../common/icons/pipeline';
 import { IconSavedObject } from '../common/icons/saved_object';
 import { IconDashboards } from '../common/icons/dashboards';
 import { IconEntityAnalytics } from '../common/icons/entity_analytics';
-
+import { useMlCapabilities } from '../common/components/ml/hooks/use_ml_capabilities';
+import { useHasSecurityCapability } from '../helper_hooks';
 import { HostIsolationExceptionsApiClient } from './pages/host_isolation_exceptions/host_isolation_exceptions_api_client';
 
 const categories = [
@@ -218,6 +219,8 @@ export const getManagementFilteredLinks = async (
     fleetAuthz && currentUser
       ? calculateEndpointAuthz(licenseService, fleetAuthz, currentUser.roles)
       : getEndpointAuthzInitialState();
+  const hasEntityAnalyticsCapability = useHasSecurityCapability('entity-analytics');
+  const isPlatinumOrTrialLicense = useMlCapabilities().isPlatinumOrTrialLicense;
 
   const showHostIsolationExceptions =
     canAccessHostIsolationExceptions || // access host isolation exceptions is a paid feature, always show the link.
@@ -256,5 +259,9 @@ export const getManagementFilteredLinks = async (
     linksToExclude.push(SecurityPageName.blocklist);
   }
 
+  if (!(hasEntityAnalyticsCapability && isPlatinumOrTrialLicense)) {
+    linksToExclude.push(SecurityPageName.entityAnalyticsManagement);
+  }
+
   return excludeLinks(linksToExclude);
 };
diff --git a/x-pack/plugins/security_solution/server/lib/risk_engine/routes/risk_engine_disable_route.ts b/x-pack/plugins/security_solution/server/lib/risk_engine/routes/risk_engine_disable_route.ts
@@ -8,7 +8,7 @@
 import type { Logger } from '@kbn/core/server';
 import { buildSiemResponse } from '@kbn/lists-plugin/server/routes/utils';
 import { transformError } from '@kbn/securitysolution-es-utils';
-import { RISK_ENGINE_DISABLE_URL } from '../../../../common/constants';
+import { RISK_ENGINE_DISABLE_URL, APP_ID } from '../../../../common/constants';
 import type { SetupPlugins } from '../../../plugin';
 import type { SecuritySolutionPluginRouter } from '../../../types';
 
@@ -22,7 +22,7 @@ export const riskEngineDisableRoute = (
       path: RISK_ENGINE_DISABLE_URL,
       validate: {},
       options: {
-        tags: ['access:securitySolution'],
+        tags: ['access:securitySolution', `access:${APP_ID}-entity-analytics`],
       },
     },
     async (context, request, response) => {

diff --git a/x-pack/plugins/security_solution/server/lib/risk_engine/routes/risk_engine_enable_route.ts b/x-pack/plugins/security_solution/server/lib/risk_engine/routes/risk_engine_enable_route.ts
@@ -8,7 +8,7 @@
 import type { Logger } from '@kbn/core/server';
 import { buildSiemResponse } from '@kbn/lists-plugin/server/routes/utils';
 import { transformError } from '@kbn/securitysolution-es-utils';
-import { RISK_ENGINE_ENABLE_URL } from '../../../../common/constants';
+import { RISK_ENGINE_ENABLE_URL, APP_ID } from '../../../../common/constants';
 import type { SetupPlugins } from '../../../plugin';
 import type { SecuritySolutionPluginRouter } from '../../../types';
 
@@ -22,7 +22,7 @@ export const riskEngineEnableRoute = (
       path: RISK_ENGINE_ENABLE_URL,
       validate: {},
       options: {
-        tags: ['access:securitySolution'],
+        tags: ['access:securitySolution', `access:${APP_ID}-entity-analytics`],
       },
     },
     async (context, request, response) => {

diff --git a/x-pack/plugins/security_solution/server/lib/risk_engine/routes/risk_engine_init_route.ts b/x-pack/plugins/security_solution/server/lib/risk_engine/routes/risk_engine_init_route.ts
@@ -8,7 +8,7 @@
 import type { Logger } from '@kbn/core/server';
 import { buildSiemResponse } from '@kbn/lists-plugin/server/routes/utils';
 import { transformError } from '@kbn/securitysolution-es-utils';
-import { RISK_ENGINE_INIT_URL } from '../../../../common/constants';
+import { RISK_ENGINE_INIT_URL, APP_ID } from '../../../../common/constants';
 import type { SetupPlugins } from '../../../plugin';
 
 import type { SecuritySolutionPluginRouter } from '../../../types';
@@ -23,7 +23,7 @@ export const riskEngineInitRoute = (
       path: RISK_ENGINE_INIT_URL,
       validate: {},
       options: {
-        tags: ['access:securitySolution'],
+        tags: ['access:securitySolution', `access:${APP_ID}-entity-analytics`],
       },
     },
     async (context, request, response) => {

diff --git a/x-pack/plugins/security_solution/server/lib/risk_engine/routes/risk_engine_status_route.ts b/x-pack/plugins/security_solution/server/lib/risk_engine/routes/risk_engine_status_route.ts
@@ -8,7 +8,7 @@
 import type { Logger } from '@kbn/core/server';
 import { buildSiemResponse } from '@kbn/lists-plugin/server/routes/utils';
 import { transformError } from '@kbn/securitysolution-es-utils';
-import { RISK_ENGINE_STATUS_URL } from '../../../../common/constants';
+import { RISK_ENGINE_STATUS_URL, APP_ID } from '../../../../common/constants';
 
 import type { SecuritySolutionPluginRouter } from '../../../types';
 
@@ -18,7 +18,7 @@ export const riskEngineStatusRoute = (router: SecuritySolutionPluginRouter, logg
       path: RISK_ENGINE_STATUS_URL,
       validate: {},
       options: {
-        tags: ['access:securitySolution'],
+        tags: ['access:securitySolution', `access:${APP_ID}-entity-analytics`],
       },
     },
     async (context, request, response) => {