All users should have read-only access to telemetry opt-in status #77246
Labels
bug
Fixes for quality problems that affect the customer experience
:Security/Feature Controls
Team:Security
Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more!
In the legacy platform, end-users did not need to read the current telemetry opt-in status, as this was handled server-side by the
kibana_system
user.The new platform uses the end-user credentials to retrieve this information, which results in a
403
error for under privileged users. This is common for users with any level of "readonly" access to Kibana.Kibana's "automatic privilege grants" should be updated so that read-only users also have access to the
telemetry
saved object type, similar to what we've done for users withall
privileges assigned:kibana/x-pack/plugins/features/server/feature_registry.ts
Lines 50 to 69 in bf04235
cc @rashmivkulkarni
The text was updated successfully, but these errors were encountered: