adjust content and index pattern

elastic · Aug 22, 2024 · d838b3c · d838b3c
1 parent 157b394
commit d838b3c
Show file tree

Hide file tree

Showing 4 changed files with 15 additions and 7 deletions.
diff --git a/...lugins/observability_solution/slo/public/components/slo/slo_permissions_callout/index.tsx b/...lugins/observability_solution/slo/public/components/slo/slo_permissions_callout/index.tsx
@@ -46,7 +46,7 @@ export function SloPermissionsCallout() {
               <li>
                 <FormattedMessage
                   id="xpack.slo.permissionsCallout.readSloPermission"
-                  defaultMessage="'read' permission on index pattern: .slo-*"
+                  defaultMessage="'read' and 'view_index_metadata' permission on index pattern: .slo-observability.*"
                 />
               </li>
             </ul>
@@ -62,7 +62,7 @@ export function SloPermissionsCallout() {
               <li>
                 <FormattedMessage
                   id="xpack.slo.permissionsCallout.writeSloPermission"
-                  defaultMessage="'all' permission on index pattern: .slo-*"
+                  defaultMessage="'read', 'view_index_metadata', 'write', 'manage' and 'auto_configure' permission on index pattern: .slo-observability.*"
                 />
               </li>
               <li>

diff --git a/x-pack/plugins/observability_solution/slo/server/services/get_diagnosis.ts b/x-pack/plugins/observability_solution/slo/server/services/get_diagnosis.ts
@@ -34,13 +34,13 @@ export async function getGlobalDiagnosis(
   const userWritePrivileges = await esClient.security.hasPrivileges({
     index: [
       {
-        names: '.slo-*',
+        names: '.slo-observability.*',
         privileges: MINIMUM_INDEX_PRIVILEGE_SET_EDITOR,
       },
     ],
   });
   const userReadPrivileges = await esClient.security.hasPrivileges({
-    index: [{ names: '.slo-*', privileges: MINIMUM_INDEX_PRIVILEGE_SET_VIEWER }],
+    index: [{ names: '.slo-observability.*', privileges: MINIMUM_INDEX_PRIVILEGE_SET_VIEWER }],
   });
 
   return {

diff --git a/x-pack/test/api_integration/services/slo.ts b/x-pack/test/api_integration/services/slo.ts
@@ -44,7 +44,7 @@ export function SloApiProvider({ getService }: FtrProviderContext) {
         elasticsearch: {
           indices: [
             {
-              names: ['.slo-*'],
+              names: ['.slo-observability.*'],
               privileges: TOTAL_INDEX_PRIVILEGE_SET_EDITOR,
             },
           ],

diff --git a/x-pack/test_serverless/api_integration/services/transform/security_common.ts b/x-pack/test_serverless/api_integration/services/transform/security_common.ts
@@ -8,6 +8,10 @@
 import { ProvidedType } from '@kbn/test';
 
 import { Client } from '@elastic/elasticsearch';
+import {
+  TOTAL_INDEX_PRIVILEGE_SET_EDITOR,
+  TOTAL_INDEX_PRIVILEGE_SET_VIEWER,
+} from '@kbn/slo-plugin/server/services/get_diagnosis';
 import { FtrProviderContext } from '../../ftr_provider_context';
 
 export type TransformSecurityCommon = ProvidedType<typeof TransformSecurityCommonProvider>;
@@ -33,14 +37,18 @@ export function TransformSecurityCommonProvider({ getService }: FtrProviderConte
     {
       name: 'transform_dest',
       elasticsearch: {
-        indices: [{ names: ['.slo-*'], privileges: ['read', 'index', 'manage', 'delete'] }],
+        indices: [
+          { names: ['.slo-observability.*'], privileges: TOTAL_INDEX_PRIVILEGE_SET_EDITOR },
+        ],
       },
       kibana: [],
     },
     {
       name: 'transform_dest_readonly',
       elasticsearch: {
-        indices: [{ names: ['.slo-*'], privileges: ['read'] }],
+        indices: [
+          { names: ['.slo-observability.*'], privileges: TOTAL_INDEX_PRIVILEGE_SET_VIEWER },
+        ],
       },
       kibana: [],
     },