Skip to content

Commit

Permalink
[SecuritySolution][Timelines] Update privilege (elastic#208383)
Browse files Browse the repository at this point in the history
## Summary

We forgot to update this privilege in
elastic#201780 . The endpoint only uses
the scoped SO client, so this missing privilege declaration does not
lead to privilege escalation on the endpoint. There are automated tests
that check for the correct privilege access for this and other
endpoints.
  • Loading branch information
janmonschke authored Jan 27, 2025
1 parent 052ec56 commit 1449a20
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ export const deleteTimelinesRoute = (router: SecuritySolutionPluginRouter) => {
path: TIMELINE_URL,
security: {
authz: {
requiredPrivileges: ['securitySolution'],
requiredPrivileges: ['timeline_write'],
},
},
access: 'public',
Expand Down

0 comments on commit 1449a20

Please sign in to comment.