[Obs AI Assistant] Add route security to the API

elastic · Nov 22, 2024 · feebf41 · feebf41
1 parent 5ee3017
commit feebf41
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/x-pack/plugins/observability_solution/observability/server/routes/assistant/route.ts b/x-pack/plugins/observability_solution/observability/server/routes/assistant/route.ts
@@ -12,9 +12,13 @@ import { createObservabilityServerRoute } from '../create_observability_server_r
 const getObservabilityAlertDetailsContextRoute = createObservabilityServerRoute({
   endpoint: 'GET /internal/observability/assistant/alert_details_contextual_insights',
   options: {
-    tags: ['access:observability'],
     access: 'internal',
   },
+  security: {
+    authz: {
+      requiredPrivileges: ['observability'],
+    },
+  },
   params: t.type({
     query: alertDetailsContextRt,
   }),

diff --git a/x-pack/plugins/observability_solution/observability/server/routes/types.ts b/x-pack/plugins/observability_solution/observability/server/routes/types.ts
@@ -5,7 +5,7 @@
  * 2.0.
  */
 import type { EndpointOf, ReturnOf, ServerRouteRepository } from '@kbn/server-route-repository';
-import { KibanaRequest, Logger } from '@kbn/core/server';
+import { KibanaRequest, Logger, RouteSecurity } from '@kbn/core/server';
 
 import {
   ObservabilityServerRouteRepository,
@@ -27,9 +27,10 @@ export interface ObservabilityRouteHandlerResources {
 
 export interface ObservabilityRouteCreateOptions {
   options: {
-    tags: string[];
+    tags?: string[];
     access?: 'public' | 'internal';
   };
+  security?: RouteSecurity;
 }
 
 export type AbstractObservabilityServerRouteRepository = ServerRouteRepository;