added internal access for cases, connectors, actions, rule registry

elastic · Sep 20, 2024 · 863f7b3 · 863f7b3
1 parent a2c96ff
commit 863f7b3
Show file tree

Hide file tree

Showing 35 changed files with 83 additions and 0 deletions.
diff --git a/x-pack/plugins/actions/server/routes/connector/get_all_system/get_all_system.ts b/x-pack/plugins/actions/server/routes/connector/get_all_system/get_all_system.ts
@@ -21,6 +21,9 @@ export const getAllConnectorsIncludingSystemRoute = (
  {
  path: `${INTERNAL_BASE_ACTION_API_PATH}/connectors`,
  validate: {},
+ options: {
+ access: 'internal',
+ },
  },
  router.handleLegacyErrors(
  verifyAccessAndContext(licenseState, async function (context, req, res) {

diff --git a/x-pack/plugins/actions/server/routes/connector/list_types_system/list_types_system.ts b/x-pack/plugins/actions/server/routes/connector/list_types_system/list_types_system.ts
@@ -27,6 +27,9 @@ export const listTypesWithSystemRoute = (
  validate: {
  query: connectorTypesQuerySchemaV1,
  },
+ options: {
+ access: 'internal',
+ },
  },
  router.handleLegacyErrors(
  verifyAccessAndContext(licenseState, async function (context, req, res) {

diff --git a/x-pack/plugins/actions/server/routes/get_global_execution_kpi.ts b/x-pack/plugins/actions/server/routes/get_global_execution_kpi.ts
@@ -45,6 +45,9 @@ export const getGlobalExecutionKPIRoute = (
  validate: {
  body: bodySchema,
  },
+ options: {
+ access: 'internal',
+ },
  },
  router.handleLegacyErrors(
  verifyAccessAndContext(licenseState, async function (context, req, res) {

diff --git a/x-pack/plugins/actions/server/routes/get_global_execution_logs.ts b/x-pack/plugins/actions/server/routes/get_global_execution_logs.ts
@@ -57,6 +57,9 @@ export const getGlobalExecutionLogRoute = (
  validate: {
  body: bodySchema,
  },
+ options: {
+ access: 'internal',
+ },
  },
  router.handleLegacyErrors(
  verifyAccessAndContext(licenseState, async function (context, req, res) {

diff --git a/x-pack/plugins/actions/server/routes/get_oauth_access_token.ts b/x-pack/plugins/actions/server/routes/get_oauth_access_token.ts
@@ -66,6 +66,9 @@ export const getOAuthAccessToken = (
  validate: {
  body: bodySchema,
  },
+ options: {
+ access: 'internal',
+ },
  },
  router.handleLegacyErrors(
  verifyAccessAndContext(licenseState, async function (context, req, res) {

diff --git a/x-pack/plugins/cases/server/routes/api/cases/categories/get_categories.ts b/x-pack/plugins/cases/server/routes/api/cases/categories/get_categories.ts
@@ -13,6 +13,9 @@ import type { caseApiV1 } from '../../../../../common/types/api';
 export const getCategoriesRoute = createCasesRoute({
  method: 'get',
  path: INTERNAL_GET_CASE_CATEGORIES_URL,
+ routerOptions: {
+ access: 'internal',
+ },
  handler: async ({ context, request, response }) => {
  try {
  const caseContext = await context.cases;

diff --git a/x-pack/plugins/cases/server/routes/api/cases/get_case.ts b/x-pack/plugins/cases/server/routes/api/cases/get_case.ts
@@ -77,6 +77,9 @@ export const getCaseRoute = createCasesRoute({
 export const resolveCaseRoute = createCasesRoute({
  method: 'get',
  path: `${CASE_DETAILS_URL}/resolve`,
+ routerOptions: {
+ access: 'internal',
+ },
  params,
  handler: async ({ context, request, response }) => {
  try {

diff --git a/x-pack/plugins/cases/server/routes/api/internal/bulk_create_attachments.ts b/x-pack/plugins/cases/server/routes/api/internal/bulk_create_attachments.ts
@@ -22,6 +22,9 @@ export const bulkCreateAttachmentsRoute = createCasesRoute({
  }),
  body: schema.arrayOf(escapeHatch),
  },
+ routerOptions: {
+ access: 'internal',
+ },
  handler: async ({ context, request, response }) => {
  try {
  const casesContext = await context.cases;

diff --git a/x-pack/plugins/cases/server/routes/api/internal/bulk_delete_file_attachments.ts b/x-pack/plugins/cases/server/routes/api/internal/bulk_delete_file_attachments.ts
@@ -24,6 +24,9 @@ export const bulkDeleteFileAttachments = createCasesRoute({
  }),
  body: escapeHatch,
  },
+ routerOptions: {
+ access: 'internal',
+ },
  handler: async ({ context, request, response }) => {
  try {
  const caseContext = await context.cases;

diff --git a/x-pack/plugins/cases/server/routes/api/internal/bulk_get_attachments.ts b/x-pack/plugins/cases/server/routes/api/internal/bulk_get_attachments.ts
@@ -24,6 +24,9 @@ export const bulkGetAttachmentsRoute = createCasesRoute({
  }),
  body: escapeHatch,
  },
+ routerOptions: {
+ access: 'internal',
+ },
  handler: async ({ context, request, response }) => {
  try {
  const caseContext = await context.cases;

diff --git a/x-pack/plugins/cases/server/routes/api/internal/bulk_get_cases.ts b/x-pack/plugins/cases/server/routes/api/internal/bulk_get_cases.ts
@@ -17,6 +17,9 @@ export const bulkGetCasesRoute = createCasesRoute({
  params: {
  body: escapeHatch,
  },
+ routerOptions: {
+ access: 'internal',
+ },
  handler: async ({ context, request, response }) => {
  const params = request.body as caseApiV1.CasesBulkGetRequest;
 

diff --git a/x-pack/plugins/cases/server/routes/api/internal/get_case_metrics.ts b/x-pack/plugins/cases/server/routes/api/internal/get_case_metrics.ts
@@ -27,6 +27,9 @@ export const getCaseMetricRoute = createCasesRoute({
  ]),
  }),
  },
+ routerOptions: {
+ access: 'internal',
+ },
  handler: async ({ context, request, response }) => {
  try {
  const caseContext = await context.cases;

diff --git a/x-pack/plugins/cases/server/routes/api/internal/get_case_user_actions_stats.ts b/x-pack/plugins/cases/server/routes/api/internal/get_case_user_actions_stats.ts
@@ -18,6 +18,9 @@ export const getCaseUserActionStatsRoute = createCasesRoute({
  case_id: schema.string(),
  }),
  },
+ routerOptions: {
+ access: 'internal',
+ },
  handler: async ({ context, request, response }) => {
  try {
  const casesContext = await context.cases;

diff --git a/x-pack/plugins/cases/server/routes/api/internal/get_case_users.ts b/x-pack/plugins/cases/server/routes/api/internal/get_case_users.ts
@@ -19,6 +19,9 @@ export const getCaseUsersRoute = createCasesRoute({
  case_id: schema.string(),
  }),
  },
+ routerOptions: {
+ access: 'internal',
+ },
  handler: async ({ context, request, response }) => {
  try {
  const casesContext = await context.cases;

diff --git a/x-pack/plugins/cases/server/routes/api/internal/get_cases_metrics.ts b/x-pack/plugins/cases/server/routes/api/internal/get_cases_metrics.ts
@@ -16,6 +16,9 @@ import { createCasesRoute } from '../create_cases_route';
 export const getCasesMetricRoute = createCasesRoute({
  method: 'get',
  path: INTERNAL_CASE_METRICS_URL,
+ routerOptions: {
+ access: 'internal',
+ },
  params: {
  query: schema.object({
  features: schema.oneOf([

diff --git a/x-pack/plugins/cases/server/routes/api/internal/get_connectors.ts b/x-pack/plugins/cases/server/routes/api/internal/get_connectors.ts
@@ -19,6 +19,9 @@ export const getConnectorsRoute = createCasesRoute({
  case_id: schema.string(),
  }),
  },
+ routerOptions: {
+ access: 'internal',
+ },
  handler: async ({ context, request, response }) => {
  try {
  const casesContext = await context.cases;

diff --git a/x-pack/plugins/cases/server/routes/api/internal/replace_custom_field.ts b/x-pack/plugins/cases/server/routes/api/internal/replace_custom_field.ts
@@ -21,6 +21,9 @@ export const replaceCustomFieldRoute = createCasesRoute({
  custom_field_id: schema.string(),
  }),
  },
+ routerOptions: {
+ access: 'internal',
+ },
  handler: async ({ context, request, response }) => {
  try {
  const caseContext = await context.cases;

diff --git a/x-pack/plugins/cases/server/routes/api/internal/suggest_user_profiles.ts b/x-pack/plugins/cases/server/routes/api/internal/suggest_user_profiles.ts
@@ -19,6 +19,7 @@ export const suggestUserProfilesRoute = (userProfileService: UserProfileService)
  path: INTERNAL_SUGGEST_USER_PROFILES_URL,
  routerOptions: {
  tags: ['access:casesSuggestUserProfiles'],
+ access: 'internal',
  },
  params: {
  body: escapeHatch,

diff --git a/x-pack/plugins/rule_registry/server/routes/bulk_update_alerts.ts b/x-pack/plugins/rule_registry/server/routes/bulk_update_alerts.ts
@@ -46,6 +46,7 @@ export const bulkUpdateAlertsRoute = (router: IRouter<RacRequestHandlerContext>)
  ),
  },
  options: {
+ access: 'internal',
  tags: ['access:rac'],
  },
  },

diff --git a/x-pack/plugins/rule_registry/server/routes/find.ts b/x-pack/plugins/rule_registry/server/routes/find.ts
@@ -38,6 +38,7 @@ export const findAlertsByQueryRoute = (router: IRouter<RacRequestHandlerContext>
  ),
  },
  options: {
+ access: 'internal',
  tags: ['access:rac'],
  },
  },

diff --git a/x-pack/plugins/rule_registry/server/routes/get_aad_fields_by_rule_type.ts b/x-pack/plugins/rule_registry/server/routes/get_aad_fields_by_rule_type.ts
@@ -27,6 +27,7 @@ export const getAADFieldsByRuleType = (router: IRouter<RacRequestHandlerContext>
  ),
  },
  options: {
+ access: 'internal',
  tags: ['access:rac'],
  },
  },

diff --git a/x-pack/plugins/rule_registry/server/routes/get_alert_by_id.ts b/x-pack/plugins/rule_registry/server/routes/get_alert_by_id.ts
@@ -35,6 +35,7 @@ export const getAlertByIdRoute = (router: IRouter<RacRequestHandlerContext>) =>
  ),
  },
  options: {
+ access: 'internal',
  tags: ['access:rac'],
  },
  },

diff --git a/x-pack/plugins/rule_registry/server/routes/get_alert_index.ts b/x-pack/plugins/rule_registry/server/routes/get_alert_index.ts
@@ -28,6 +28,7 @@ export const getAlertsIndexRoute = (router: IRouter<RacRequestHandlerContext>) =
  ),
  },
  options: {
+ access: 'internal',
  tags: ['access:rac'],
  },
  },

diff --git a/x-pack/plugins/rule_registry/server/routes/get_alert_summary.ts b/x-pack/plugins/rule_registry/server/routes/get_alert_summary.ts
@@ -40,6 +40,7 @@ export const getAlertSummaryRoute = (router: IRouter<RacRequestHandlerContext>)
  ),
  },
  options: {
+ access: 'internal',
  tags: ['access:rac'],
  },
  },

diff --git a/x-pack/plugins/rule_registry/server/routes/get_alerts_group_aggregations.ts b/x-pack/plugins/rule_registry/server/routes/get_alerts_group_aggregations.ts
@@ -36,6 +36,7 @@ export const getAlertsGroupAggregations = (router: IRouter<RacRequestHandlerCont
  ),
  },
  options: {
+ access: 'internal',
  tags: ['access:rac'],
  },
  },

diff --git a/x-pack/plugins/rule_registry/server/routes/get_browser_fields_by_feature_id.ts b/x-pack/plugins/rule_registry/server/routes/get_browser_fields_by_feature_id.ts
@@ -27,6 +27,7 @@ export const getBrowserFieldsByFeatureId = (router: IRouter<RacRequestHandlerCon
  ),
  },
  options: {
+ access: 'internal',
  tags: ['access:rac'],
  },
  },

diff --git a/x-pack/plugins/rule_registry/server/routes/get_feature_ids_by_registration_contexts.ts b/x-pack/plugins/rule_registry/server/routes/get_feature_ids_by_registration_contexts.ts
@@ -27,6 +27,7 @@ export const getFeatureIdsByRegistrationContexts = (router: IRouter<RacRequestHa
  ),
  },
  options: {
+ access: 'internal',
  tags: ['access:rac'],
  },
  },

diff --git a/x-pack/plugins/rule_registry/server/routes/update_alert_by_id.ts b/x-pack/plugins/rule_registry/server/routes/update_alert_by_id.ts
@@ -36,6 +36,7 @@ export const updateAlertByIdRoute = (router: IRouter<RacRequestHandlerContext>)
  ),
  },
  options: {
+ access: 'internal',
  tags: ['access:rac'],
  },
  },

diff --git a/x-pack/plugins/stack_connectors/server/routes/get_well_known_email_service.ts b/x-pack/plugins/stack_connectors/server/routes/get_well_known_email_service.ts
@@ -29,6 +29,9 @@ export const getWellKnownEmailServiceRoute = (router: IRouter) => {
  validate: {
  params: paramSchema,
  },
+ options: {
+ access: 'internal',
+ },
  },
  handler
  );

diff --git a/x-pack/plugins/stack_connectors/server/routes/valid_slack_api_channels.ts b/x-pack/plugins/stack_connectors/server/routes/valid_slack_api_channels.ts
@@ -37,6 +37,9 @@ export const validSlackApiChannelsRoute = (
  validate: {
  body: bodySchema,
  },
+ options: {
+ access: 'internal',
+ },
  },
  handler
  );

diff --git a/x-pack/plugins/triggers_actions_ui/server/data/routes/fields.ts b/x-pack/plugins/triggers_actions_ui/server/data/routes/fields.ts
@@ -32,6 +32,9 @@ export function createFieldsRoute(logger: Logger, router: IRouter, baseRoute: st
  validate: {
  body: bodySchema,
  },
+ options: {
+ access: 'internal',
+ },
  },
  handler
  );

diff --git a/x-pack/plugins/triggers_actions_ui/server/data/routes/indices.ts b/x-pack/plugins/triggers_actions_ui/server/data/routes/indices.ts
@@ -36,6 +36,9 @@ export function createIndicesRoute(logger: Logger, router: IRouter, baseRoute: s
  validate: {
  body: bodySchema,
  },
+ options: {
+ access: 'internal',
+ },
  },
  handler
  );

diff --git a/x-pack/plugins/triggers_actions_ui/server/data/routes/time_series_query.ts b/x-pack/plugins/triggers_actions_ui/server/data/routes/time_series_query.ts
@@ -31,6 +31,9 @@ export function createTimeSeriesQueryRoute(
  validate: {
  body: TimeSeriesQuerySchema,
  },
+ options: {
+ access: 'internal',
+ },
  },
  handler
  );

diff --git a/x-pack/plugins/triggers_actions_ui/server/routes/config.ts b/x-pack/plugins/triggers_actions_ui/server/routes/config.ts
@@ -39,6 +39,9 @@ export function createConfigRoute({
  {
  path,
  validate: false,
+ options: {
+ access: 'internal',
+ },
  },
  handler
  );

diff --git a/x-pack/plugins/triggers_actions_ui/server/routes/health.ts b/x-pack/plugins/triggers_actions_ui/server/routes/health.ts
@@ -26,6 +26,9 @@ export function createHealthRoute(
  {
  path,
  validate: false,
+ options: {
+ access: 'internal',
+ },
  },
  handler
  );