From d868116936e0ae1231e4abc7750d330629009f0e Mon Sep 17 00:00:00 2001
From: John Dorlus <silne.dorlus@elastic.co>
Date: Tue, 8 Dec 2020 18:44:48 -0500
Subject: [PATCH] [7.10] Changed rollup tests to use test user rather than
 elastic super user. (#79567) (#85096)

* Changed rollup tests to use test user rather than elastic super user. (#79567)

* removed .only for testing

* Added config with minimum permissions.

* Removed kibana user role.

I removed the kibana user role to remove redundancy.

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>

* Update rollup_jobs.js

Made fix to the test to stop page from refreshing after role is added.

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
---
 .../functional/apps/rollup_job/rollup_jobs.js | 10 ++++++++--
 x-pack/test/functional/config.js              | 19 +++++++++++++++++++
 2 files changed, 27 insertions(+), 2 deletions(-)

diff --git a/x-pack/test/functional/apps/rollup_job/rollup_jobs.js b/x-pack/test/functional/apps/rollup_job/rollup_jobs.js
index 5b6484d7184f3..88e43e2ee0708 100644
--- a/x-pack/test/functional/apps/rollup_job/rollup_jobs.js
+++ b/x-pack/test/functional/apps/rollup_job/rollup_jobs.js
@@ -11,7 +11,8 @@ import { mockIndices } from './hybrid_index_helper';
 export default function ({ getService, getPageObjects }) {
   const es = getService('legacyEs');
   const esArchiver = getService('esArchiver');
-  const PageObjects = getPageObjects(['rollup', 'common']);
+  const PageObjects = getPageObjects(['rollup', 'common', 'security']);
+  const security = getService('security');
 
   describe('rollup job', function () {
     //Since rollups can only be created once with the same name (even if you delete it),
@@ -20,6 +21,7 @@ export default function ({ getService, getPageObjects }) {
     const targetIndexName = 'rollup-to-be';
     const rollupSourceIndexPattern = 'to-be*';
     const rollupSourceDataPrepend = 'to-be';
+
     //make sure all dates have the same concept of "now"
     const now = new Date();
     const pastDates = [
@@ -27,6 +29,10 @@ export default function ({ getService, getPageObjects }) {
       datemath.parse('now-2d', { forceNow: now }),
       datemath.parse('now-3d', { forceNow: now }),
     ];
+    before(async () => {
+      await security.testUser.setRoles(['manage_rollups_role'], false);
+      await PageObjects.common.navigateToApp('rollupJob');
+    });
 
     it('create new rollup job', async () => {
       const interval = '1000ms';
@@ -35,7 +41,6 @@ export default function ({ getService, getPageObjects }) {
         await es.index(mockIndices(day, rollupSourceDataPrepend));
       }
 
-      await PageObjects.common.navigateToApp('rollupJob');
       await PageObjects.rollup.createNewRollUpJob(
         rollupJobName,
         rollupSourceIndexPattern,
@@ -66,6 +71,7 @@ export default function ({ getService, getPageObjects }) {
       await es.indices.delete({ index: targetIndexName });
       await es.indices.delete({ index: rollupSourceIndexPattern });
       await esArchiver.load('empty_kibana');
+      await security.testUser.restoreDefaults();
     });
   });
 }
diff --git a/x-pack/test/functional/config.js b/x-pack/test/functional/config.js
index aff8a123a3521..2c90b3edbfb6f 100644
--- a/x-pack/test/functional/config.js
+++ b/x-pack/test/functional/config.js
@@ -412,6 +412,25 @@ export default async function ({ readConfigFile }) {
             },
           ],
         },
+        manage_rollups_role: {
+          elasticsearch: {
+            cluster: ['manage', 'manage_rollup'],
+            indices: [
+              {
+                names: ['*'],
+                privileges: ['read', 'delete', 'create_index', 'view_index_metadata'],
+              },
+            ],
+          },
+          kibana: [
+            {
+              feature: {
+                discover: ['read'],
+              },
+              spaces: ['*'],
+            },
+          ],
+        },
 
         //Kibana feature privilege isn't specific to advancedSetting. It can be anything. https://github.com/elastic/kibana/issues/35965
         test_api_keys: {