[Spaces] - Reactify roles screen

x-pack/plugins/security/public/documentation_links.js

@@ -7,5 +7,8 @@
 import { ELASTIC_WEBSITE_URL, DOC_LINK_VERSION } from 'ui/documentation_links';
 
 export const documentationLinks = {
-  dashboardViewMode: `${ELASTIC_WEBSITE_URL}guide/en/kibana/${DOC_LINK_VERSION}/xpack-view-modes.html`
+  dashboardViewMode: `${ELASTIC_WEBSITE_URL}guide/en/kibana/${DOC_LINK_VERSION}/xpack-view-modes.html`,
+  esClusterPrivileges: `${ELASTIC_WEBSITE_URL}guide/en/x-pack/current/security-privileges.html#security-privileges`,
+  esIndicesPrivileges: `${ELASTIC_WEBSITE_URL}guide/en/x-pack/current/security-privileges.html#privileges-list-indices`,
+  esRunAsPrivileges: `${ELASTIC_WEBSITE_URL}guide/en/x-pack/current/security-privileges.html#_run_as_privilege`,
 };

x-pack/plugins/security/public/lib/role.js

@@ -14,4 +14,13 @@ import { get } from 'lodash';
  */
 export function isRoleEnabled(role) {
   return get(role, 'transient_metadata.enabled', true);
-}
+}
+
+/**
+ * Returns whether given role is reserved or not.
+ *
+ * @param {role} the Role as returned by roles API
+ */
+export function isReservedRole(role) {
+  return get(role, 'metadata._reserved', false);
+}

x-pack/plugins/security/public/lib/role.test.js

@@ -0,0 +1,59 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License;
+ * you may not use this file except in compliance with the Elastic License.
+ */
+
+import { isRoleEnabled, isReservedRole } from './role';
+
+describe('role', () => {
+  describe('isRoleEnabled', () => {
+    test('should return false if role is explicitly not enabled', () => {
+      const testRole = {
+        transient_metadata: {
+          enabled: false
+        }
+      };
+      expect(isRoleEnabled(testRole)).toBe(false);
+    });
+
+    test('should return true if role is explicitly enabled', () => {
+      const testRole = {
+        transient_metadata: {
+          enabled: true
+        }
+      };
+      expect(isRoleEnabled(testRole)).toBe(true);
+    });
+
+    test('should return true if role is NOT explicitly enabled or disabled', () => {
+      const testRole = {};
+      expect(isRoleEnabled(testRole)).toBe(true);
+    });
+  });
+
+  describe('isReservedRole', () => {
+    test('should return false if role is explicitly not reserved', () => {
+      const testRole = {
+        metadata: {
+          _reserved: false
+        }
+      };
+      expect(isReservedRole(testRole)).toBe(false);
+    });
+
+    test('should return true if role is explicitly reserved', () => {
+      const testRole = {
+        metadata: {
+          _reserved: true
+        }
+      };
+      expect(isReservedRole(testRole)).toBe(true);
+    });
+
+    test('should return false if role is NOT explicitly reserved or not reserved', () => {
+      const testRole = {};
+      expect(isReservedRole(testRole)).toBe(false);
+    });
+  });
+});

x-pack/plugins/security/public/objects/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License;
+ * you may not use this file except in compliance with the Elastic License.
+ */
+
+export { saveRole, deleteRole } from './lib/roles';
+
+export { getFields } from './lib/get_fields';

x-pack/plugins/security/public/objects/lib/get_fields.js

@@ -0,0 +1,14 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License;
+ * you may not use this file except in compliance with the Elastic License.
+ */
+import chrome from 'ui/chrome';
+
+const apiBase = chrome.addBasePath(`/api/security/v1/fields`);
+
+export async function getFields($http, query) {
+  return await $http
+    .get(`${apiBase}/${query}`)
+    .then(response => response.data || []);
+}

x-pack/plugins/security/public/objects/lib/roles.js

@@ -0,0 +1,16 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License;
+ * you may not use this file except in compliance with the Elastic License.
+ */
+import chrome from 'ui/chrome';
+
+const apiBase = chrome.addBasePath(`/api/security/v1/roles`);
+
+export async function saveRole($http, role) {
+  return await $http.post(`${apiBase}/${role.name}`, role);
+}
+
+export async function deleteRole($http, name) {
+  return await $http.delete(`${apiBase}/${name}`);
+}

x-pack/plugins/security/public/objects/role.js

@@ -0,0 +1,13 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License;
+ * you may not use this file except in compliance with the Elastic License.
+ */
+
+export class Role {
+  name = null;
+  cluster = [];
+  indices = [];
+  run_as = []; //eslint-disable-line camelcase
+  applications = [];
+}

x-pack/plugins/security/public/services/role_privileges.js

@@ -0,0 +1,42 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License;
+ * you may not use this file except in compliance with the Elastic License.
+ */
+
+const clusterPrivileges = [
+  'all',
+  'monitor',
+  'manage',
+  'manage_security',
+  'manage_index_templates',
+  'manage_pipeline',
+  'manage_ingest_pipelines',
+  'transport_client',
+  'manage_ml',
+  'monitor_ml',
+  'manage_watcher',
+  'monitor_watcher',
+];
+const indexPrivileges = [
+  'all',
+  'manage',
+  'monitor',
+  'read',
+  'index',
+  'create',
+  'delete',
+  'write',
+  'delete_index',
+  'create_index',
+  'view_index_metadata',
+  'read_cross_cluster',
+];
+
+export function getClusterPrivileges() {
+  return [...clusterPrivileges];
+}
+
+export function getIndexPrivileges() {
+  return [...indexPrivileges];
+}