Can a normal user get API read/write permissions?

Dear all =)

Is it possible for a normal Kibana user to have API read/write permissions?

What I would like to be to do is create and delete Kibana Alerts, but when I do

$ curl -u sandra -X POST " -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d '" -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d @create.json 

I get 404 indicating I am missing a write permission.

From my understand Kibana Spaces should allow to users (or API keys) to get read/write access to specific spaces. Is that correct and if so, does that also apply for the API?

Sandra =)

Are you sure space exists? I would expect a 403 if you didn't have permission to the resource. 404 indicates it doesn't exist.

1 Like

@tylersmalley Thanks a lot for pointing that out! That helped me to find the problem =)

The abovecurl command is messed up from a bad copy/paste. It should have been

curl -u "x:x" -X POST $url \
     -H 'kbn-xsrf: true' -H 'Content-Type: application/json' \
     -d '{"a":"a"}'

Here I used the URL that I dumped from Chrome, but according to the doc I should have used

/api/alerting/rule instead of /api/alerts/alert.

What is the difference of the two?

I am so happy, that is works now. Thanks again =)

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.