Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Kibana] Create a sub-privilege under "Discover that allow/disallow "Saved Searches" #158175

Closed
ninoslavmiskovic opened this issue May 22, 2023 · 2 comments
Closed

[Kibana] Create a sub-privilege under "Discover that allow/disallow "Saved Searches" #158175

ninoslavmiskovic opened this issue May 22, 2023 · 2 comments
Assignees
@jughosta
Labels
enhancement New value added to drive a business result impact:high Addressing this issue will have a high level of impact on the quality/strength of our product. loe:medium Medium Level of Effort Team:DataDiscovery Discover, search (e.g. data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL.

Comments

@ninoslavmiskovic
Copy link
Contributor

Describe the feature:

Add a sub-privilege under Analytics ==> "Discover" for "Saved Search", so that admins can control which users can create "Saved Searches".

Skærmbillede 2023-05-22 kl 14 04 00

Describe a specific use case for the feature:

Admin wants to give "all" rights to Discover but only "read" for Dashboard. Today, these users can manipulate Dashboards by changing and/or adding Saved Searches to a dashboard, even when they have "Read" only access. By controlling "Saved Searches" as a sub-privilege, admins will be able to set up users on a more granular level and prevent these kinds of use cases.
@ninoslavmiskovic ninoslavmiskovic added the Team:DataDiscovery Discover, search (e.g. data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL. label May 22, 2023
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-data-discovery (Team:DataDiscovery)

@kertal kertal added enhancement New value added to drive a business result impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. loe:medium Medium Level of Effort labels May 23, 2023
@Danouchka Danouchka added impact:high Addressing this issue will have a high level of impact on the quality/strength of our product. and removed impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. labels Jun 12, 2023
@kertal
Copy link
Member

kertal commented Jun 30, 2023

Closing this, because implementing #158173 will enable users to actually edit / add saved queries in Discover readonly mode. And in this mode, it's not permitted to add/save Saved searches. So there's no need for a sub-privilege.

@kertal kertal closed this as completed Jun 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jughosta jughosta

Labels
enhancement New value added to drive a business result impact:high Addressing this issue will have a high level of impact on the quality/strength of our product. loe:medium Medium Level of Effort Team:DataDiscovery Discover, search (e.g. data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
5 participants
@kertal @jughosta @elasticmachine @Danouchka @ninoslavmiskovic