[Home] Home app shows unusable controls to under-privileged users

[jportner]

Kibana version: 7.14.0 and earlier

Describe the bug:

As a minimally-privileged user, I can see several UI elements in the Home app that I cannot interact with.

Steps to reproduce:

1. Create a minimal role, grant it only Read access to the Dashboard feature
2. Create a user and assign it the new role
3. Log in as the new user
4. Observe that you only have access to the Dashboard app, Home app, and Enterprise Search app
5. Navigate to the Home app

Expected behavior:

Any UI elements that require more privileges should be either hidden, or grayed out with an appropriate tooltip.
Tooltips should not show unintelligible error messages.

Screenshots (if relevant):

Screenshot 1:

Screenshot 2:

Screenshot 3:

Screenshot 4:

Screenshot 5:

Additional context

As demonstrated in screenshots 4 and 5, the "Upload file" tab behaves differently depending on your ML permissions. Screenshot 4 shows a user with only Read access to Dashboard. Screenshot 5 shows a user with Read access to both Dashboard and ML.

Probably related to #106617 and #106621

[elasticmachine]

Pinging @elastic/kibana-core (Team:Core)

[joshdover]

I know there are some changes planned for this Home page UI related to the Getting Started initiative, so I hesitate to prioritize any effort to fix these problems without knowing the scope of those changes. For example, I believe much of the "Add data" catalog is soon to be replaced with the Fleet integrations UI.

@elastic/kibana-design Maybe you all can shed some light on the eventual end-state of this UI? I'm also curious how we should handle some of these scenarios since simply hiding some of these UI elements may not actually be what we want to do. Where can I find the latest designs and roadmap for this UI?

[ryankeairns]

There will be several upcoming iterations on the home page, the first of which (for 7.15) is likely rather small:

• visually level the solution; reduce Kibana
• ratchet up the Integrations card; add a callout

Last we spoke with Kibana Product, there remained a bit of uncertainty as to when and how much we promote Integrations, but we expect things to change further in 7.16. For example, it seems increasingly likely that we start people at Integrations (ASAP) but, even then, there's the possibility we come back to a revamped home page.

In my opinion, as of this moment :) , fixing these issues feels like something we should not eliminate from our consideration for 7.15. If such fixes were made, then the design team could assist with adapting the design as things are unavailable.

We should have more certainty next week 🤞

cc:/ @alexfrancoeur @snide @MichaelMarcialis

[ryankeairns]

See related SDH issue https://github.com/elastic/sdh-kibana/issues/1848 which covers, more broadly, privileges for adding data.

[vadimkibana]

Related #138547

[vadimkibana]

Related #100628