[Fleet]: Forbidden error is displayed on clicking Get Uninstall command for user role Agents: None.

[amolnater-qasource]

Kibana Build details:

VERSION: 8.16.0 SNAPSHOT
BUILD: 77913
COMMIT: f2aba4624160124344e98dac19d5eefd83fa79ce

Role:

Integrations: All
Fleet: Read
Agents: None
Agent policies: All
Settings: All

Preconditions:

1. 8.16.0-SNAPSHOT Kibana cloud environment should be available.
2. New User should be created with above defined role.

Steps to reproduce:

1. Login with the above user.
2. Navigate to Agent policies tab>policy with Elastic Defend.
3. Navigate to policy settings enable Tamper protection and click Get Uninstall command.
4. Observe forbidden error is displayed under Agents tab for custom user with Agent policies: None.

Expected Result:
Forbidden error shouldn't displayed on clicking Get Uninstall command/ or Get Uninstall command should be disabled for user role Agents: None.

Screen Recording:

Agent.policies.-.Fleet.-.Elastic.-.Google.Chrome.2024-09-03.19-12-02.mp4

Feature:
https://github.com/elastic/ingest-dev/issues/2903

[elasticmachine]

Pinging @elastic/fleet (Team:Fleet)

[amolnater-qasource]

@muskangulati-qasource Please review.

[muskangulati-qasource]

Secondary review on this ticket is Done!

[nchaulet]

Uninstall tokens should only be available for user with Agents:All we should hide the button if the user do not have the required permissions

[amolnater-qasource]

Hi Team,

We have revalidated this issue on latest 8.17.0-SNAPSHOT kibana cloud environment and found it fixed now.

Observations:

• Uninstall command link is disabled under agent policy settings for user role Agents: None.

Build details:
VERSION: 8.17.0 SNAPSHOT
BUILD: 80188
COMMIT: fdb16ae

Screen Recording:

Agent.policy.5.-.Agent.policies.-.Fleet.-.Elastic.-.Google.Chrome.2024-11-19.16-10-08.mp4

Hence we are marking this issue as QA:Validated.

Thanks!