[Files] File service bulk delete

[jonathan-buttner]

Cases adding a feature to allow users to attach files to a case. A user will be able to delete files individually or delete an entire case and all files associated with it. Currently, the file service does not provide a bulk deletion API per file kind. The file service does provide a bulk deletion for admin users that have the file management role but a cases user may not have this configured.

Would it be possible to have a bulk deletion api that accepts an array of file kinds? If that's not feasible having a bulk deletion api per file kind would also help.

[elasticmachine]

Pinging @elastic/response-ops-cases (Feature:Cases)

[elasticmachine]

Pinging @elastic/appex-sharedux (Team:SharedUX)

[petrklapka]

@sixstringcode - Let's get more detail about what the ask is. Clarify scope of delete (does it tie to a specific case, or is it a global delete request etc.)

[vadimkibana]

@jonathan-buttner just to clarify, once a case is deleted, you would like to also delete all the files associated with it. So, Kibana server receives a case deletion request and it wants to initiate file deletion from the server-side, right now there is ability to delete one file at-a-time, but your request is to provide also an ability for a bulk delete?

[vadimkibana]

Basically, right now there is a delete() method, which accepts a single { id } param, we would need to extend it to:

• Expose bulkDelete()
• Which accepts a list of { ids: string[] }
• Should execute multiple deletes in parallel
• Should continue processing even if some delete operation fails
• Should return a list of errors, if any
• Should limit concurrency, to say 5 deletes in-flight

[jonathan-buttner]

@jonathan-buttner just to clarify, once a case is deleted, you would like to also delete all the files associated with it. So, Kibana server receives a case deletion request and it wants to initiate file deletion from the server-side, right now there is ability to delete one file at-a-time, but your request is to provide also an ability for a bulk delete?

Yep, that's correct.

Are you thinking that the bulk delete would be for a single file kind or would it not need the file kind at all?

Cases has a bulk deletion of cases and technically a user could delete an observability case and a security case at the same time which would result in bulk deleting multiple file kinds. This is unlikely though as the cases UI only allows bulk deletion within a single plugin.

Basically, right now there is a delete() method, which accepts a single { id } param, we would need to extend it to:

All those items sound great!