add forced control to update and upgrade

elastic · Jul 13, 2022 · 81b8982 · 81b8982
1 parent fbce8d9
commit 81b8982
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/x-pack/plugins/fleet/server/services/package_policy.ts b/x-pack/plugins/fleet/server/services/package_policy.ts
@@ -381,6 +381,10 @@ class PackagePolicyService implements PackagePolicyServiceInterface {
     const oldPackagePolicy = await this.get(soClient, id);
     const { version, ...restOfPackagePolicy } = packagePolicy;
 
+    if (packagePolicyUpdate.is_managed && !options?.force) {
+      throw new PackagePolicyRestrictionRelatedError(`Cannot update package policy ${id}`);
+    }
+
     if (!oldPackagePolicy) {
       throw new Error('Package policy not found');
     }
@@ -611,7 +615,7 @@ class PackagePolicyService implements PackagePolicyServiceInterface {
     soClient: SavedObjectsClientContract,
     esClient: ElasticsearchClient,
     ids: string[],
-    options?: { user?: AuthenticatedUser },
+    options?: { user?: AuthenticatedUser; force?: boolean },
     packagePolicy?: PackagePolicy,
     pkgVersion?: string
   ): Promise<UpgradePackagePolicyResponse> {
@@ -627,6 +631,10 @@ class PackagePolicyService implements PackagePolicyServiceInterface {
           pkgVersion
         ));
 
+        if (packagePolicy.is_managed && !options?.force) {
+          throw new PackagePolicyRestrictionRelatedError(`Cannot upgrade package policy ${id}`);
+        }
+
         await this.doUpgrade(soClient, esClient, id, packagePolicy!, result, packageInfo, options);
       } catch (error) {
         result.push({