[7.17] [Observability] [RAC] [Alerts] Resolve bug where "mark as.." for a single alert would redirect to security solution route

[dhurley14]

Resolves bug where a user updating a single alert in observability using the actions dropdown in the t-grid alerts table would be redirected to the security solution detections status route, not the RAC alerts status route

Bug

If we select the actions for a specific alert, it is redirected to the security solution api due to a logic bug..

Response with a 403:

This PR resolves this bug by correctly redirecting to the RAC alerts route, not the detections alerts route.

Checklist

Delete any items that are not applicable to this PR.

• Unit or functional tests were updated or added to match the most common scenarios

For maintainers

• This was checked for breaking API changes and was labeled appropriately

[mgiota]

@dhurley14 I confirm that your fix solves the issue. I tested it manually and it works fine. I mark an alert as acknowledged or closed and alert appears under observability acknowledged or closed tab accordingly.

Your test is failing though. It gets stuck here, where as you can see under closed tab there are two alerts (metrics and apm) that are read only and that's why the checkbox is disabled.

I will approve the PR. Let me know if you need any help fixing the failing test.

[mgiota]

@dhurley14 I did a bit more manual testing with a user role with Logs: All and Metrics: Read and I get following error

[mgiota]

@dhurley14 I just pushed a fix for the forbidden error I posted above. Make sure to pull (or rebase whatever works for you) before you push.

[kibana-ci]

💚 Build Succeeded

• Buildkite Build
• Commit: 4cd5ada
• Storybooks Preview

Metrics [docs]

Page load bundle

Size of the bundles that are downloaded on every page load. Target size is below 100kb

id	before	after	diff
timelines	311.0KB	311.0KB	+4.0B

History

• 💔 Build #39244 failed e17125b

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @dhurley14