Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ML] Minimally privileged ML user has access to "Import data" #106617

Closed
jportner opened this issue Jul 22, 2021 · 3 comments
Closed

[ML] Minimally privileged ML user has access to "Import data" #106617

jportner opened this issue Jul 22, 2021 · 3 comments
Assignees
Labels
bug Fixes for quality problems that affect the customer experience Feature:File and Index Data Viz ML file and index data visualizer :ml v8.4.0

Comments

@jportner
Copy link
Contributor

Kibana version: 7.14.0 and earlier

Describe the bug:

A user with only "Read" access to the ML feature can see unusable UI elements. The Data Visualizer tab offers to allow the user to "Select file" to start to import data. The user can upload a file, configure some things, and get all the way to the end of the workflow to find out that the "Import" button is grayed out with a tooltip saying they don't have required privileges.

Steps to reproduce:

  1. Create a minimal role, grant it only Read access to the ML feature
  2. Create a user and assign it the new role
  3. Log in as the new user
  4. Navigate to the ML app and the Data Visualizer tab
  5. Click "Select file" and upload a file
  6. Scroll down

Expected behavior:

The user should not see the "Import data" panel at all, or the "Select file" button should be grayed out with an appropriate tooltip.

Screenshots (if relevant):

Screenshot 1:
image

Screenshot 2:
image

Screenshot 3:
image

Additional context

Potentially related to #106569

@jportner jportner added bug Fixes for quality problems that affect the customer experience :ml labels Jul 22, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/ml-ui (:ml)

@jgowdyelastic
Copy link
Member

It is still useful to be able to visualize the contents of a file even if the ability to upload is inavailable.
We can make text changes here depending user permissions, so users do not go into the feature believing they can import data.

@peteharverson peteharverson changed the title Minimally privileged ML user has access to "Import data" [ML] Minimally privileged ML user has access to "Import data" Apr 12, 2022
@peteharverson peteharverson added the Feature:File and Index Data Viz ML file and index data visualizer label Apr 12, 2022
@peteharverson peteharverson self-assigned this Jul 5, 2022
@peteharverson
Copy link
Contributor

Closing issue as the title on the card in screenshot 1 in #106617 (comment) no longer uses the term 'Import':

image

and #135905 removes the phrase import the data into an Elasticsearch index from the about screen in the file data visualizer for users without the necessary privileges for importing data.

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience Feature:File and Index Data Viz ML file and index data visualizer :ml v8.4.0
Projects
None yet
Development

No branches or pull requests

4 participants