Skip to content

Commit

Permalink
[Security Solution] Add csp-rule-template to the Security Default Sav…
Browse files Browse the repository at this point in the history 
…ed Objects (elastic#194224)

## Summary

This PR fixes elastic#189538, by adding `csp-rule-template` to the Security
Default Saved Objects.

This allows users with the [viewer
role](https://www.elastic.co/docs/current/serverless/general/assign-user-roles)
to Security projects in Serverless to see the [Cloud Security Posture
Benchmark
rules](https://github.com/elastic/integrations/tree/main/packages/cloud_security_posture/kibana/csp_rule_template)
that are stored as saved objects installed with the Cloud Security
Posture integration.

### Snapshots

![image](https://github.com/user-attachments/assets/95b92570-ac7a-42b5-b89f-a02d5b94f3b0)

![image](https://github.com/user-attachments/assets/a2aeb0a6-d10e-4864-84b9-9eaffe8ec3a2)

![image](https://github.com/user-attachments/assets/9eb9fb82-3fe6-4b6d-8523-566d406406ce)

![image](https://github.com/user-attachments/assets/37ebc71a-54be-4a7c-b5f8-37a1d6467816)

(cherry picked from commit 3862012)
  • Loading branch information
@opauloh
opauloh committed Oct 8, 2024
1 parent c6cb2f7 commit 11dc5c0
Show file tree
Hide file tree
Showing 2 changed files with 37 additions and 0 deletions.
3 changes: 3 additions & 0 deletions ...k/plugins/security_solution/server/lib/product_features_service/security_saved_objects.ts
View file
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,8 @@ import { savedObjectTypes } from '../../saved_objects';
// Same as the saved-object type for rules defined by Cloud Security Posture
const CLOUD_POSTURE_SAVED_OBJECT_RULE_TYPE = 'csp_rule';
const CLOUD_SECURITY_POSTURE_SETTINGS = 'cloud-security-posture-settings';
// Benchmark Rule Templates installed by the Cloud Security Posture package stored as Saved Objects:
const CLOUD_SECURITY_POSTURE_BENCHMARK_RULE_TEMPLATE = 'csp-rule-template';

export const securityDefaultSavedObjects = [
'exception-list',
Expand All @@ -20,4 +22,5 @@ export const securityDefaultSavedObjects = [
...savedObjectTypes,
CLOUD_POSTURE_SAVED_OBJECT_RULE_TYPE,
CLOUD_SECURITY_POSTURE_SETTINGS,
CLOUD_SECURITY_POSTURE_BENCHMARK_RULE_TEMPLATE,
];
34 changes: 34 additions & 0 deletions ...k/test_serverless/api_integration/test_suites/security/platform_security/authorization.ts
View file
Original file line number Diff line number Diff line change
Expand Up @@ -397,6 +397,18 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:cloud-security-posture-settings/delete",
"saved_object:cloud-security-posture-settings/bulk_delete",
"saved_object:cloud-security-posture-settings/share_to_space",
"saved_object:csp-rule-template/bulk_get",
"saved_object:csp-rule-template/get",
"saved_object:csp-rule-template/find",
"saved_object:csp-rule-template/open_point_in_time",
"saved_object:csp-rule-template/close_point_in_time",
"saved_object:csp-rule-template/create",
"saved_object:csp-rule-template/bulk_create",
"saved_object:csp-rule-template/update",
"saved_object:csp-rule-template/bulk_update",
"saved_object:csp-rule-template/delete",
"saved_object:csp-rule-template/bulk_delete",
"saved_object:csp-rule-template/share_to_space",
"saved_object:telemetry/bulk_get",
"saved_object:telemetry/get",
"saved_object:telemetry/find",
Expand Down Expand Up @@ -1242,6 +1254,18 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:cloud-security-posture-settings/delete",
"saved_object:cloud-security-posture-settings/bulk_delete",
"saved_object:cloud-security-posture-settings/share_to_space",
"saved_object:csp-rule-template/bulk_get",
"saved_object:csp-rule-template/get",
"saved_object:csp-rule-template/find",
"saved_object:csp-rule-template/open_point_in_time",
"saved_object:csp-rule-template/close_point_in_time",
"saved_object:csp-rule-template/create",
"saved_object:csp-rule-template/bulk_create",
"saved_object:csp-rule-template/update",
"saved_object:csp-rule-template/bulk_update",
"saved_object:csp-rule-template/delete",
"saved_object:csp-rule-template/bulk_delete",
"saved_object:csp-rule-template/share_to_space",
"saved_object:telemetry/bulk_get",
"saved_object:telemetry/get",
"saved_object:telemetry/find",
Expand Down Expand Up @@ -1823,6 +1847,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:cloud-security-posture-settings/find",
"saved_object:cloud-security-posture-settings/open_point_in_time",
"saved_object:cloud-security-posture-settings/close_point_in_time",
"saved_object:csp-rule-template/bulk_get",
"saved_object:csp-rule-template/get",
"saved_object:csp-rule-template/find",
"saved_object:csp-rule-template/open_point_in_time",
"saved_object:csp-rule-template/close_point_in_time",
"saved_object:config/bulk_get",
"saved_object:config/get",
"saved_object:config/find",
Expand Down Expand Up @@ -2184,6 +2213,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:cloud-security-posture-settings/find",
"saved_object:cloud-security-posture-settings/open_point_in_time",
"saved_object:cloud-security-posture-settings/close_point_in_time",
"saved_object:csp-rule-template/bulk_get",
"saved_object:csp-rule-template/get",
"saved_object:csp-rule-template/find",
"saved_object:csp-rule-template/open_point_in_time",
"saved_object:csp-rule-template/close_point_in_time",
"saved_object:config/bulk_get",
"saved_object:config/get",
"saved_object:config/find",
Expand Down

0 comments on commit 11dc5c0

Please sign in to comment.