[Security Solution][Endpoint] Isolate Action should only be available to Platinum+ licenses

x-pack/plugins/security_solution/common/license/mocks.ts

@@ -0,0 +1,21 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import { LicenseService } from './license';
+
+export const createLicenseServiceMock = (): jest.Mocked<LicenseService> => {
+  return ({
+    start: jest.fn(),
+    stop: jest.fn(),
+    getLicenseInformation: jest.fn(),
+    getLicenseInformation$: jest.fn(),
+    isAtLeast: jest.fn(),
+    isGoldPlus: jest.fn().mockReturnValue(true),
+    isPlatinumPlus: jest.fn().mockReturnValue(true),
+    isEnterprise: jest.fn().mockReturnValue(true),
+  } as unknown) as jest.Mocked<LicenseService>;
+};

x-pack/plugins/security_solution/public/common/hooks/__mocks__/use_license.ts

@@ -0,0 +1,11 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import { createLicenseServiceMock } from '../../../../common/license/mocks';
+
+export const licenseService = createLicenseServiceMock();
+export const useLicense = () => licenseService;

x-pack/plugins/security_solution/public/management/pages/endpoint_hosts/view/details/components/actions_menu.test.tsx

@@ -15,8 +15,10 @@ import React from 'react';
 import { act } from '@testing-library/react';
 import { endpointPageHttpMock } from '../../../mocks';
 import { fireEvent } from '@testing-library/dom';
+import { licenseService } from '../../../../../../common/hooks/use_license';
 
 jest.mock('../../../../../../common/lib/kibana');
+jest.mock('../../../../../../common/hooks/use_license');
 
 describe('When using the Endpoint Details Actions Menu', () => {
   let render: () => Promise<ReturnType<AppContextTestRender['render']>>;
@@ -112,4 +114,21 @@ describe('When using the Endpoint Details Actions Menu', () => {
       expect(coreStart.application.navigateToApp).toHaveBeenCalled();
     });
   });
+
+  describe('and license is NOT PlatinumPlus', () => {
+    (licenseService as jest.Mocked<typeof licenseService>).isPlatinumPlus.mockReturnValue(false);
+
+    it('should not show the `isoalte` action', async () => {
+      setEndpointMetadataResponse();
+      await render();
+      expect(renderResult.queryByTestId('isolateLink')).toBeNull();
+    });
+
+    it('should still show `unisolate` action for endpoints that are currently isolated', async () => {
+      setEndpointMetadataResponse(true);
+      await render();
+      expect(renderResult.queryByTestId('isolateLink')).toBeNull();
+      expect(renderResult.getByTestId('unIsolateLink')).not.toBeNull();
+    });
+  });
 });

x-pack/plugins/security_solution/public/management/pages/endpoint_hosts/view/hooks/use_endpoint_action_items.tsx

@@ -17,7 +17,8 @@ import { useEndpointSelector } from './hooks';
 import { agentPolicies, uiQueryParams } from '../../store/selectors';
 import { useKibana } from '../../../../../common/lib/kibana';
 import { ContextMenuItemNavByRouterProps } from '../components/context_menu_item_nav_by_rotuer';
-import { isEndpointHostIsolated } from '../../../../../common/utils/validators/is_endpoint_host_isolated';
+import { isEndpointHostIsolated } from '../../../../../common/utils/validators';
+import { useLicense } from '../../../../../common/hooks/use_license';
 
 /**
  * Returns a list (array) of actions for an individual endpoint
@@ -26,6 +27,7 @@ import { isEndpointHostIsolated } from '../../../../../common/utils/validators/i
 export const useEndpointActionItems = (
   endpointMetadata: MaybeImmutable<HostMetadata> | undefined
 ): ContextMenuItemNavByRouterProps[] => {
+  const isPlatinumPlus = useLicense().isPlatinumPlus();
   const { formatUrl } = useFormatUrl(SecurityPageName.administration);
   const fleetAgentPolicies = useEndpointSelector(agentPolicies);
   const allCurrentUrlParams = useEndpointSelector(uiQueryParams);
@@ -58,9 +60,9 @@ export const useEndpointActionItems = (
         selected_endpoint: endpointId,
       });
 
-      return [
-        isIsolated
-          ? {
+      const isolationActions = isIsolated // Un-isolate is always available to users regardless of license level
+        ? [
+            {
               'data-test-subj': 'unIsolateLink',
               icon: 'logoSecurity',
               key: 'unIsolateHost',
@@ -75,8 +77,11 @@ export const useEndpointActionItems = (
                   defaultMessage="Unisolate host"
                 />
               ),
-            }
-          : {
+            },
+          ]
+        : isPlatinumPlus // For Platinum++ licenses, users also have ability to isolate
+        ? [
+            {
               'data-test-subj': 'isolateLink',
               icon: 'logoSecurity',
               key: 'isolateHost',
@@ -92,6 +97,11 @@ export const useEndpointActionItems = (
                 />
               ),
             },
+          ]
+        : [];
+
+      return [
+        ...isolationActions,
         {
           'data-test-subj': 'hostLink',
           icon: 'logoSecurity',
@@ -183,5 +193,12 @@ export const useEndpointActionItems = (
     }
 
     return [];
-  }, [allCurrentUrlParams, endpointMetadata, fleetAgentPolicies, formatUrl, getUrlForApp]);
+  }, [
+    allCurrentUrlParams,
+    endpointMetadata,
+    fleetAgentPolicies,
+    formatUrl,
+    getUrlForApp,
+    isPlatinumPlus,
+  ]);
 };

x-pack/plugins/security_solution/public/management/pages/policy/view/policy_details.test.tsx

@@ -17,17 +17,7 @@ import { policyListApiPathHandlers } from '../store/test_mock_utils';
 import { licenseService } from '../../../../common/hooks/use_license';
 
 jest.mock('../../../../common/components/link_to');
-jest.mock('../../../../common/hooks/use_license', () => {
-  const licenseServiceInstance = {
-    isPlatinumPlus: jest.fn(),
-  };
-  return {
-    licenseService: licenseServiceInstance,
-    useLicense: () => {
-      return licenseServiceInstance;
-    },
-  };
-});
+jest.mock('../../../../common/hooks/use_license');
 
 describe('Policy Details', () => {
   type FindReactWrapperResponse = ReturnType<ReturnType<typeof render>['find']>;