Fix endpointAppContextServices use of calculateEndpointAuthz (#123494)

elastic · Jan 20, 2022 · 855bfd3 · 855bfd3
1 parent ee34a7a
commit 855bfd3
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/x-pack/plugins/security_solution/server/endpoint/endpoint_app_context_services.ts b/x-pack/plugins/security_solution/server/endpoint/endpoint_app_context_services.ts
@@ -139,7 +139,9 @@ export class EndpointAppContextService {
 
   public async getEndpointAuthz(request: KibanaRequest): Promise<EndpointAuthz> {
     const fleetAuthz = await this.getFleetAuthzService().fromRequest(request);
-    return calculateEndpointAuthz(this.getLicenseService(), fleetAuthz);
+    const userRoles = this.startDependencies?.security.authc.getCurrentUser(request)?.roles ?? [];
+
+    return calculateEndpointAuthz(this.getLicenseService(), fleetAuthz, userRoles);
   }
 
   public getEndpointMetadataService(): EndpointMetadataService {