Skip to content

Commit 7dc6465

Browse files
[Security Solution][Entity Analytics][Privileged User Monitoring] Add Privileged User Monitoring index in the Reserved roles store. (elastic#134619)
* Code changes to add Privileged User Monitoring index in the Reserved roles store. * Fixing compilation errors * Adding tests relevant to changes in ReservedRolesStore
1 parent e9d47f2 commit 7dc6465

File tree

2 files changed

+11
-3
lines changed

2 files changed

+11
-3
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStore.java

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -79,6 +79,7 @@ public class ReservedRolesStore implements BiConsumer<Set<String>, ActionListene
7979
public static final String ENTITY_STORE_V1_LATEST_INDEX = ".entities.v1.latest.security_*";
8080
public static final String ENTITY_STORE_HISTORY_INDEX = ".entities.*.history.*";
8181
public static final String ASSET_CRITICALITY_INDEX = ".asset-criticality.asset-criticality-*";
82+
public static final String PRIVILEGED_USER_MONITORING_INDEX = ".entity_analytics.monitoring*";
8283

8384
/** Index pattern for Universal Profiling */
8485
public static final String UNIVERSAL_PROFILING_ALIASES = "profiling-*";
@@ -781,8 +782,9 @@ private static RoleDescriptor buildViewerRoleDescriptor() {
781782
ReservedRolesStore.LISTS_INDEX_REINDEXED_V8,
782783
ReservedRolesStore.LISTS_ITEMS_INDEX_REINDEXED_V8,
783784
ReservedRolesStore.ENTITY_STORE_V1_LATEST_INDEX,
784-
ReservedRolesStore.ENTITY_STORE_HISTORY_INDEX,
785-
ReservedRolesStore.ASSET_CRITICALITY_INDEX
785+
ReservedRolesStore.ASSET_CRITICALITY_INDEX,
786+
ReservedRolesStore.PRIVILEGED_USER_MONITORING_INDEX,
787+
ReservedRolesStore.ENTITY_STORE_HISTORY_INDEX
786788
)
787789
.privileges("read", "view_index_metadata")
788790
.build(),
@@ -851,7 +853,11 @@ private static RoleDescriptor buildEditorRoleDescriptor() {
851853
.build(),
852854
// Security - Entity Store is view only
853855
RoleDescriptor.IndicesPrivileges.builder()
854-
.indices(ReservedRolesStore.ENTITY_STORE_V1_LATEST_INDEX, ReservedRolesStore.ENTITY_STORE_HISTORY_INDEX)
856+
.indices(
857+
ReservedRolesStore.ENTITY_STORE_V1_LATEST_INDEX,
858+
ReservedRolesStore.PRIVILEGED_USER_MONITORING_INDEX,
859+
ReservedRolesStore.ENTITY_STORE_HISTORY_INDEX
860+
)
855861
.privileges("read", "view_index_metadata")
856862
.build(),
857863
// Alerts-as-data

x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3815,6 +3815,7 @@ public void testPredefinedViewerRole() {
38153815

38163816
assertOnlyReadAllowed(role, ".entities.v1.latest.security_" + randomIntBetween(0, 5));
38173817
assertOnlyReadAllowed(role, ".asset-criticality.asset-criticality-" + randomIntBetween(0, 5));
3818+
assertOnlyReadAllowed(role, ".entity_analytics.monitoring" + randomIntBetween(0, 5));
38183819

38193820
assertOnlyReadAllowed(role, ".slo-observability." + randomIntBetween(0, 5));
38203821
assertViewIndexMetadata(role, ".slo-observability." + randomIntBetween(0, 5));
@@ -3887,6 +3888,7 @@ public void testPredefinedEditorRole() {
38873888
assertOnlyReadAllowed(role, "profiling-" + randomIntBetween(0, 5));
38883889
assertOnlyReadAllowed(role, ".profiling-" + randomIntBetween(0, 5));
38893890
assertOnlyReadAllowed(role, ".entities.v1.latest.security_" + randomIntBetween(0, 5));
3891+
assertOnlyReadAllowed(role, ".entity_analytics.monitoring" + randomIntBetween(0, 5));
38903892
assertOnlyReadAllowed(role, randomAlphaOfLength(5));
38913893

38923894
assertReadWriteDocsAndMaintenanceButNotDeleteIndexAllowed(role, ".siem-signals-" + randomIntBetween(0, 5));

0 commit comments

Comments
 (0)