[Cases] RBAC

[cnasikas]

Cases RBAC meta ticket

Resources

• RFC: [Cases] RFC: RBAC #94054
• Moving cases meta: [SECURITY SOLUTIONS] Meta to move cases everywhere #90905
• Case connector RBAC discussion: [Actions][Cases] Case Connector RBAC Discussion #94498
• Feature PR: [Cases] RBAC #95058

Tasks (in dependency order)

• Authorization class ([Cases] Authorization Class #94185)
• Integration tests for the create and _find API route ([Cases] RBAC: Create & Find integration tests #95511)
• Rename class attribute to owner ([Cases][RBAC] Rename scope to owner #96035)
• Create an audit logger to audit all authorization successes and/or failures ([Cases] RBAC: Audit log all authorization actions #95806, [Cases] Authorization and Client Audit Logger #95477)
• Enchance the APIs to push their functionality into the case client ([Cases] Refactor case client #94187, [Cases] Cases client enchantment #95923)
• Migrate all routes' unit tests to integration tests ([Cases] Refactor case client #94187, [Cases] RBAC: Migrate routes' unit tests to integration tests #96374)
• Implement the authorization step within each method of the case client ([Cases] Add permissions check within each case client method/HTTP route #94188, [Cases] Add authorization to configuration & cases routes #97228, [Cases] Add RBAC to remaining Cases APIs #98762)
• Integration tests for all remaining API routes. Needs to be done after moving all route logic inside the case client ([Cases] Create RBAC integration tests for all remaining API routes #95805, [Cases] Add space only tests #99409, [Cases] Add security only tests #99679)
• UI changes ([Cases] RBAC UI Changes #95470, [Cases] RBAC on UI #99478)
• Feature Privileges for Security Solution & Observability ([RAC] RBAC around rules/alerts in Observability/Security Solutions #97124, [Cases] RBAC #95058, [Observability] [Cases] Cases in the observability app #101487)
• UI failure message design ([Cases] RBAC UI Message #95471)
• Bugs ([Cases] RBAC Bugs #100468)

[elasticmachine]

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)