Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Discover application is not usable if the user doesn't have any index privileges. #181430

Closed
azasypkin opened this issue Apr 23, 2024 · 1 comment · Fixed by #184740
Closed

Discover application is not usable if the user doesn't have any index privileges. #181430

azasypkin opened this issue Apr 23, 2024 · 1 comment · Fixed by #184740
Assignees
Labels
bug Fixes for quality problems that affect the customer experience Feature:Discover Discover Application impact:needs-assessment Product and/or Engineering needs to evaluate the impact of the change. Team:DataDiscovery Discover App Team (Document Explorer, Saved Search, Surrounding documents, Graph)
Projects

Comments

@azasypkin
Copy link
Member

azasypkin commented Apr 23, 2024

Summary

If a user is granted the Discover feature privilege (either All or Read), but lacks any index privileges, they will see this error screen when attempting to access the Discover application:

image

The error message is confusing and not really actionable. However, if a user manages to craft a link that points to a specific data view, the error looks different and provides a bit more context on what went wrong:

image

I quickly checked how Kibana handled that case in the past (8.6). It wasn't ideal, but still more actionable, as error messages indicated a permissions problem:

image

--

Ideally, user should see a clear/actionable error message in such scenario as it's not that uncommon.

@azasypkin azasypkin added bug Fixes for quality problems that affect the customer experience Feature:Discover Discover Application Team:DataDiscovery Discover App Team (Document Explorer, Saved Search, Surrounding documents, Graph) labels Apr 23, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-data-discovery (Team:DataDiscovery)

@kibanamachine kibanamachine added this to Inbox in Discover Apr 23, 2024
@kertal kertal added the impact:needs-assessment Product and/or Engineering needs to evaluate the impact of the change. label Apr 25, 2024
@kertal kertal assigned jughosta and unassigned mattkime Jun 7, 2024
jughosta added a commit that referenced this issue Jun 7, 2024
…ta view (#184740)

- Closes #181430

## Summary

Before:
<img width="1628" alt="Screenshot 2024-06-04 at 15 03 49"
src="https://github.com/elastic/kibana/assets/1415710/f1f5e82a-350d-47ef-b54e-cb48267ae2cd">

After:
<img width="1630" alt="Screenshot 2024-06-04 at 15 03 13"
src="https://github.com/elastic/kibana/assets/1415710/1cf5ce94-2e88-4a56-8d65-e4fab1f90f7b">

For testing:
Create a user with full access to Discover (but without configuring
index privileges) and navigate to the default `/discover` route

<img width="1057" alt="Screenshot 2024-06-04 at 15 16 17"
src="https://github.com/elastic/kibana/assets/1415710/3134f294-0e69-4f87-a235-8da780690913">
kibanamachine pushed a commit to kibanamachine/kibana that referenced this issue Jun 7, 2024
…ta view (elastic#184740)

- Closes elastic#181430

## Summary

Before:
<img width="1628" alt="Screenshot 2024-06-04 at 15 03 49"
src="https://github.com/elastic/kibana/assets/1415710/f1f5e82a-350d-47ef-b54e-cb48267ae2cd">

After:
<img width="1630" alt="Screenshot 2024-06-04 at 15 03 13"
src="https://github.com/elastic/kibana/assets/1415710/1cf5ce94-2e88-4a56-8d65-e4fab1f90f7b">

For testing:
Create a user with full access to Discover (but without configuring
index privileges) and navigate to the default `/discover` route

<img width="1057" alt="Screenshot 2024-06-04 at 15 16 17"
src="https://github.com/elastic/kibana/assets/1415710/3134f294-0e69-4f87-a235-8da780690913">

(cherry picked from commit 5b7381a)
kibanamachine added a commit that referenced this issue Jun 7, 2024
…ault data view (#184740) (#184997)

# Backport

This will backport the following commits from `main` to `8.14`:
- [[Discover] Notify the user about issues with access to the default
data view (#184740)](#184740)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Julia
Rechkunova","email":"julia.rechkunova@elastic.co"},"sourceCommit":{"committedDate":"2024-06-07T10:54:08Z","message":"[Discover]
Notify the user about issues with access to the default data view
(#184740)\n\n- Closes
#181430
Summary\r\n\r\nBefore:\r\n<img width=\"1628\" alt=\"Screenshot
2024-06-04 at 15 03
49\"\r\nsrc=\"https://github.com/elastic/kibana/assets/1415710/f1f5e82a-350d-47ef-b54e-cb48267ae2cd\">\r\n\r\nAfter:\r\n<img
width=\"1630\" alt=\"Screenshot 2024-06-04 at 15 03
13\"\r\nsrc=\"https://github.com/elastic/kibana/assets/1415710/1cf5ce94-2e88-4a56-8d65-e4fab1f90f7b\">\r\n\r\nFor
testing:\r\nCreate a user with full access to Discover (but without
configuring\r\nindex privileges) and navigate to the default `/discover`
route\r\n\r\n<img width=\"1057\" alt=\"Screenshot 2024-06-04 at 15 16
17\"\r\nsrc=\"https://github.com/elastic/kibana/assets/1415710/3134f294-0e69-4f87-a235-8da780690913\">","sha":"5b7381a70253f5d8366ad4e739f3e414fed53da0","branchLabelMapping":{"^v8.15.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","Team:DataDiscovery","backport:prev-minor","v8.15.0"],"title":"[Discover]
Notify the user about issues with access to the default data
view","number":184740,"url":"#184740
Notify the user about issues with access to the default data view
(#184740)\n\n- Closes
#181430
Summary\r\n\r\nBefore:\r\n<img width=\"1628\" alt=\"Screenshot
2024-06-04 at 15 03
49\"\r\nsrc=\"https://github.com/elastic/kibana/assets/1415710/f1f5e82a-350d-47ef-b54e-cb48267ae2cd\">\r\n\r\nAfter:\r\n<img
width=\"1630\" alt=\"Screenshot 2024-06-04 at 15 03
13\"\r\nsrc=\"https://github.com/elastic/kibana/assets/1415710/1cf5ce94-2e88-4a56-8d65-e4fab1f90f7b\">\r\n\r\nFor
testing:\r\nCreate a user with full access to Discover (but without
configuring\r\nindex privileges) and navigate to the default `/discover`
route\r\n\r\n<img width=\"1057\" alt=\"Screenshot 2024-06-04 at 15 16
17\"\r\nsrc=\"https://github.com/elastic/kibana/assets/1415710/3134f294-0e69-4f87-a235-8da780690913\">","sha":"5b7381a70253f5d8366ad4e739f3e414fed53da0"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v8.15.0","branchLabelMappingKey":"^v8.15.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/184740","number":184740,"mergeCommit":{"message":"[Discover]
Notify the user about issues with access to the default data view
(#184740)\n\n- Closes
#181430
Summary\r\n\r\nBefore:\r\n<img width=\"1628\" alt=\"Screenshot
2024-06-04 at 15 03
49\"\r\nsrc=\"https://github.com/elastic/kibana/assets/1415710/f1f5e82a-350d-47ef-b54e-cb48267ae2cd\">\r\n\r\nAfter:\r\n<img
width=\"1630\" alt=\"Screenshot 2024-06-04 at 15 03
13\"\r\nsrc=\"https://github.com/elastic/kibana/assets/1415710/1cf5ce94-2e88-4a56-8d65-e4fab1f90f7b\">\r\n\r\nFor
testing:\r\nCreate a user with full access to Discover (but without
configuring\r\nindex privileges) and navigate to the default `/discover`
route\r\n\r\n<img width=\"1057\" alt=\"Screenshot 2024-06-04 at 15 16
17\"\r\nsrc=\"https://github.com/elastic/kibana/assets/1415710/3134f294-0e69-4f87-a235-8da780690913\">","sha":"5b7381a70253f5d8366ad4e739f3e414fed53da0"}}]}]
BACKPORT-->

Co-authored-by: Julia Rechkunova <julia.rechkunova@elastic.co>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience Feature:Discover Discover Application impact:needs-assessment Product and/or Engineering needs to evaluate the impact of the change. Team:DataDiscovery Discover App Team (Document Explorer, Saved Search, Surrounding documents, Graph)
Projects
No open projects
Development

Successfully merging a pull request may close this issue.

5 participants