[Security Solution][RAC] - 7.15 Checklist

[michaelolo24]

Below find a checklist of remaining items that should be completed by the 7.15 release

---

Alert Status updates

• Update the bulk status to use the new RBAC based routes [TGrid] Alerts status update use RBAC api #108092
• Change the in-progress references to acknowledged [Security Solution][Detection Alerts] Changes in-progress status to acknowledged #107972
• Cases work to use alerts client: [Cases] Include rule registry client for updating alert statuses #108588
• Observability integration of alert status (sergi) [RAC][Observability] Add status update actions in row menu #108698

Flyout updates

• Add the case actions to the alert flyout [RAC][Security Solution] Add to case actions in detail flyout #108057
• Add the reason field to the alert flyout overview page [Security Solution] Add reason field #108449
• Add RBAC to the alert flyout [RAC] integrating rbac search strategy with alert flyout #107748, [RAC] integrating rbac search strategy with alert flyout #108375, [RAC] integrating rbac search strategy with alert flyout #108748

Flyout Bug Fixes

• Fix double lines in header and add overflow button to hover action [Security Solution] flyout UI adjustment #108192
• Fix hover actions to show properly in flyout table [Security Solution] flyout UI adjustment #108192

Alert Table

• Enable RBAC for alert table [RAC] - Update field names #107857
• Index reason field and show in Alert Table [Security Solution][RAC] - Add reason field #107532
• Update default table columns [Security Solution][RAC] - Add reason field #107532
• Reason/row renderer popover [Security solution] [RAC] Add row renderer popover to alert table "reason" field #108054
• Building Block Filters [RAC] [Alerts] Add highlight to building block alerts #107727
• Migrate indices to signals.* => kibana.alert.* [Security Solution][RAC] - Update UI signal references #107713 - out of scope for 7.15. Will be done once the alerts rbac redesign is finalized
  • update signal.* references here as well: https://github.com/elastic/kibana/pull/108449/files
• Default enable Alert Table [Security Solution][RAC] - Enable tGrid by default #108632
• Alert Table loading state for change and switching pagination #108432 (post FF)
• Integrate Add To Case action in Observability [RAC][Security Solution][Observability] Add the add to new case and add to existing case actions to observability alerts table #108502
• Add inspect icon to the table
• Remove euiPanel padding and shadow from around table Remove EuiPanel padding and shadow around Alerts DataGrid #108597

Alert Table Bug Fixes

• Unify actions popover styling between table and flyout to have no nesting [RAC] Actions popovers UI unification #109221
• No scrolling within data grid [Security Solution][RAC] - Table Functionality Updates #107917
• Fix hover actions to show properly in table [Security Solution][RAC] - Hide hover actions overflow #109693
• Fix expand hover action in data grid [Security Solution] Fix expand hover action in data grid #108616
• Change icons in the table (add to case and analyze will be in overflow) [RAC][Security Solution] Alert table: Resolver and Cases icons to bulk action menu #108420
• Don’t show analyze button if it’s not available [RAC][Security Solution] Alert table: Resolver and Cases icons to bulk action menu #108420
• Confirm code changes from comments in cases actions are applied in a follow up PR:
  • Original PR: [RAC][Security Solution][Observability] Add the add to new case and add to existing case actions to observability alerts table #108502
• Fix / re-enable cypress tests:
  • PR with tests to fix: [Security Solution][RAC] - Enable tGrid by default #108632
  • Fixes: Bringing cypress tests back #109129 and [CTI] bring back skipped cypress tests #108978

UI Changes

• Migrate case status buttons to top of page [Security Solution][Detection Page] Status filter refactor #107249
• Alerts page header changes [Security Solution][RAC] - Alerts Header Changes #107909
• Add loading and empty states for alert table [RAC] [Security Solution] Improve security alerts t-grid loading and empty state #108527
• Enable rule detail link and alert detail popover in observability cases detail view [RAC] [Observability] [Security Solution] Use correct url to management app for observability cases, use normalized ids #108775
• Confirm follow up PR for last updated loading fix is created to not flicker:
  • Original PR: [Security Solution][Detections] Moves last updated info inline with status filter #108096
• Update UI to check alerts auth [Security Solution] - Updating UI to work with new kibana privileges abstraction on alerts #108961
  • Hide alerts actions/screens if alerts privileges none
  • Add reading glasses and gray out actions related to alerts for alerts privileges read

BUG FIXES FOUND BY OTHERS BELOW THIS LINE PLEASE (so we can prioritize)

---

• Top padding of table container unnecessarily large
  

• Unable to paginate while in full screen mode in alerts table
  

• [RAC] Expand popover on datagrid not showing full content #108907

• [RAC] Workflow status button group on Security is showing different than on Observability #108893

• [RAC] Last updated tooltip not synced with displayed text #108909

• [RAC] Popover for top values allows for infinite popovers #108910

• [RAC] Bulk action popover text for workflow status change inconsistent #108912

[elasticmachine]

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[peluja1012]

Here's a related bug that can be closed when we add the "empty" state #108168

[michaelolo24]

Closing this as all the bugs and issues here have been fixed with the exception of this this issue:

"Migrate indices to signals.* => kibana.alert.* [Security Solution][RAC] - Update UI signal references #107713 - out of scope for 7.15. Will be done once the alerts rbac redesign is finalized
update signal.* references here as well: #108449 (files)"

Which is being tracked here: #107713