How to use Elasticseach API client.security.authenticate() in kibana custom plugin?

Disha_Bodade · September 10, 2021, 12:29pm

I have a custom plugin created, I want to get current user login details to check whether the user is admin or not. I found out Elasticseach API client.security.authenticate() this can be used to do so, but I did not get any proper way to use it.

Can anybody reply with the procedure to do so? How can I use this call in kibana plugin public/components/app.tsx or in server.route call?

mattkime · September 14, 2021, 12:44pm

Hello @Disha_Bodade

What version of kibana are you developing for?

Which privileges do you need the user to have? There are a lot of different options. You could look at the user and roles settings to determine what you need and then we could find a programmatic way to check.

Disha_Bodade · September 14, 2021, 1:14pm

I am developing for kibana-7.10.2.
I don't want to give any privileges to user. I want to check what privileges user has. For example: user1 logged in through kibana and that user has backend role as admin. then that user1 should be able to access plugin page. if it does not has backend role as admin, that user shouldn't be able to access the plugin page.

yes, for above scenario I want to do it programmatically in kibana client side or server side.

mattkime · September 14, 2021, 3:00pm

You should use the capabilities api. unfortunately its not well documented.

github.com

elastic/kibana/blob/master/src/core/public/application/capabilities/capabilities_service.tsx

/*
 * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
 * or more contributor license agreements. Licensed under the Elastic License
 * 2.0 and the Server Side Public License, v 1; you may not use this file except
 * in compliance with, at your election, the Elastic License 2.0 or the Server
 * Side Public License, v 1.
 */

import { RecursiveReadonly } from '@kbn/utility-types';
import { deepFreeze } from '@kbn/std';

import { Capabilities } from '../../../types/capabilities';
import { HttpStart } from '../../http';

interface StartDeps {
  appIds: string[];
  http: HttpStart;
}

/** @internal */

This file has been truncated. show original

I recommend looking at the index pattern management plugin to see how its used https://github.com/elastic/kibana/tree/master/src/plugins/index_pattern_management/public

system · October 12, 2021, 3:00pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.