[APM] Add missing ML privileges (#80553)

elastic · Oct 15, 2020 · 1304c21 · 1304c21
1 parent 114fb3a
commit 1304c21
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/x-pack/plugins/ml/common/types/capabilities.ts b/x-pack/plugins/ml/common/types/capabilities.ts
@@ -9,6 +9,7 @@ import { PLUGIN_ID } from '../constants/app';
 
 export const apmUserMlCapabilities = {
   canGetJobs: false,
+  canAccessML: false,
 };
 
 export const userMlCapabilities = {

diff --git a/x-pack/test/apm_api_integration/common/authentication.ts b/x-pack/test/apm_api_integration/common/authentication.ts
@@ -29,6 +29,15 @@ const roles = {
     ],
   },
   [ApmUser.apmReadUserWithoutMlAccess]: {
+    elasticsearch: {
+      cluster: [],
+      indices: [
+        {
+          names: ['apm-*'],
+          privileges: ['read', 'view_index_metadata'],
+        },
+      ],
+    },
     kibana: [
       {
         base: [],
@@ -74,7 +83,7 @@ const users = {
     roles: ['apm_user', ApmUser.apmReadUser],
   },
   [ApmUser.apmReadUserWithoutMlAccess]: {
-    roles: ['apm_user', ApmUser.apmReadUserWithoutMlAccess],
+    roles: [ApmUser.apmReadUserWithoutMlAccess],
   },
   [ApmUser.apmWriteUser]: {
     roles: ['apm_user', ApmUser.apmWriteUser],