api-authz

What problem does it solve?

This Skill ensures that all API routes within Kibana are properly secured with authorization checks, preventing unauthorized access to sensitive data and functionality.

Core Features & Use Cases

• Route Security Configuration: Define authorization requirements for API endpoints using requiredPrivileges.
• Privilege Naming Conventions: Enforces a consistent <operation>_<subject> format for clear and maintainable privilege definitions.
• Conditional Logic: Enables dynamic route behavior based on user privileges using request.authzResult.
• Opting Out: Provides mechanisms to safely disable authorization for specific routes when necessary, with clear reasons.
• Use Case: When developing a new API endpoint that should only be accessible by administrators, you would use this Skill to define the necessary administrative privileges in the route's security configuration.

Quick Start

Configure the '/api/users' route to require the 'admin_users' privilege for access.