Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security Solution] Timeline title editing / saving should not be available if you don't have permissions #120019

Closed
Tracked by #120277
snide opened this issue Nov 30, 2021 · 2 comments · Fixed by #136724
Closed
Tracked by #120277

[Security Solution] Timeline title editing / saving should not be available if you don't have permissions #120019

snide opened this issue Nov 30, 2021 · 2 comments · Fixed by #136724
Assignees
@logeekal
Labels
bug Fixes for quality problems that affect the customer experience Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting:Investigations Security Solution Investigations Team Team:Threat Hunting Security Solution Threat Hunting Team

Comments

@snide
Copy link
Contributor

snide commented Nov 30, 2021

Summary

If you have access to viewing timelines through RBAC but do not have access to save them, the controls for naming / saving the timeline are still exposed. This leads the user to think their timeline can be saved, but on refresh the timeline will dissaper (since the changes were made only in state).

cc @stephmilovic and @michaelolo24 who asked me to create this issue.

image

Video

https://snid.es/2021NOV/Zf6jLc7u-h1tlm-M.mp4
@snide snide added bug Fixes for quality problems that affect the customer experience triage_needed Team:Threat Hunting Security Solution Threat Hunting Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. labels Nov 30, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@michaelolo24 michaelolo24 added Team:Threat Hunting:Investigations Security Solution Investigations Team and removed triage_needed labels Nov 30, 2021
@snide snide mentioned this issue Dec 2, 2021
Open
25 tasks
@logeekal logeekal self-assigned this Jul 18, 2022
@logeekal logeekal mentioned this issue Jul 20, 2022
Merged
9 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@logeekal logeekal

Labels
bug Fixes for quality problems that affect the customer experience Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:Threat Hunting:Investigations Security Solution Investigations Team Team:Threat Hunting Security Solution Threat Hunting Team
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[SecuritySolution] Update Save Timeline button behaviour logeekal/kibana
4 participants
@snide @logeekal @elasticmachine @michaelolo24