Inappropriate permissions' handling in MITRE intelligence section

[davidjiglesias]

Hello,

The RBAC permissions in the MITRE intelligence section of the Wazuh Dashboard are not being properly handled.

If we enter the MITRE inventory section without read permissions, the following errors appear:

[Machi3mfl]

Steps to reproduce and test solution

1. Create a user with mitre:read denied

2. Create policy

3. Create role and assign policy created

4. Create user and assign role created

5. Add new API in settings using the user created

6. Go to Mitre section and check the Intelligence tab. Check changing API selected. Check api user with permissions too.

Screen.Recording.2022-06-14.at.13.15.16.mov

[Desvelao]

Solved in:

• Added authorization prompt in Mitre > Intelligence #4261 for 4.3-7.10
• [Backport 4.3-7.16] Added authorization prompt in Mitre > Intelligence #4271 for 4.3-7.16
• [Backport 4.3-1.2-wzd] Added authorization prompt in Mitre > Intelligence #4272 for 4.3-1.2-wzd