Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Cases] Add permissions check within each case client method/HTTP route #94188

Closed
jonathan-buttner opened this issue Mar 9, 2021 · 3 comments
Closed

[Cases] Add permissions check within each case client method/HTTP route #94188

jonathan-buttner opened this issue Mar 9, 2021 · 3 comments
Labels
Feature:Cases Cases feature Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting Security Solution Threat Hunting Team Theme: rac label obsolete

Comments

@jonathan-buttner
Copy link
Contributor

Add the permissions verification to each of the case client method which each of the HTTP routes should leverage to ensure the user has the correct permissions for the operation.
@jonathan-buttner jonathan-buttner added Team:Threat Hunting Security Solution Threat Hunting Team Feature:Cases Cases feature Feature:Cases-RAC-RBAC labels Mar 9, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

@jonathan-buttner jonathan-buttner mentioned this issue Mar 9, 2021
Closed
@asnehalb asnehalb added the Theme: rac label obsolete label Mar 11, 2021
@cnasikas cnasikas mentioned this issue Mar 30, 2021
Closed
12 tasks
@cnasikas cnasikas added the Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. label Mar 30, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@cnasikas
Copy link
Member

cnasikas commented Jun 8, 2021

Implemented in #95058

@cnasikas cnasikas closed this as completed Jun 8, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Feature:Cases Cases feature Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting Security Solution Threat Hunting Team Theme: rac label obsolete
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@cnasikas @elasticmachine @jonathan-buttner @asnehalb