Registers the required kibana privileges in the connector adapter

elastic · Apr 10, 2024 · a7ddc63 · a7ddc63
1 parent 9d3b79e
commit a7ddc63
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/x-pack/plugins/cases/server/connectors/cases/index.test.ts b/x-pack/plugins/cases/server/connectors/cases/index.test.ts
@@ -267,5 +267,22 @@ describe('getCasesConnectorType', () => {
         expect(connectorParams.subActionParams.owner).toBe('cases');
       });
     });
+
+    describe('getKibanaPrivileges', () => {
+      it('constructs the correct privileges from the consumer', () => {
+        const adapter = getCasesConnectorAdapter();
+
+        expect(adapter.getKibanaPrivileges?.({ consumer: AlertConsumers.SIEM })).toEqual([
+          'cases:securitySolution/createCase',
+          'cases:securitySolution/updateCase',
+          'cases:securitySolution/deleteCase',
+          'cases:securitySolution/pushCase',
+          'cases:securitySolution/createComment',
+          'cases:securitySolution/updateComment',
+          'cases:securitySolution/deleteComment',
+          'cases:securitySolution/findConfigurations',
+        ]);
+      });
+    });
   });
 });
diff --git a/x-pack/plugins/cases/server/connectors/cases/index.ts b/x-pack/plugins/cases/server/connectors/cases/index.ts
@@ -94,6 +94,10 @@ export const getCasesConnectorAdapter = (): ConnectorAdapter<
 
       return { subAction: 'run', subActionParams };
     },
+    getKibanaPrivileges: ({ consumer }) => {
+      const owner = getOwnerFromRuleConsumer(consumer);
+      return constructRequiredKibanaPrivileges(owner);
+    },
   };
 };