fix(rbac): Fix blank Compliance/Vulnerabilities/Security Events requiring manual refresh for restricted users (#209)

- Fix nvVariables.ns defaulting to NV_SCHEMA instead of NV_POD_NAMESPACE
  (typo introduced in NVSHAS-9432 broke API calls for restricted users)
- Add null guards in preprocessCompliance for entity lookups filtered by RBAC
- Guard mapWorkloadService against missing workloadMap entries
- Initialize complianceData/vulQueryData to null to prevent premature rendering
- Call params.failCallback() in VulnerabilityItemsGrid on fetch error

Author: rushk014

pkg/neuvector-ui-ext/components/Compliance/Compliance.vue

@@ -64,7 +64,7 @@
                     node: 0,
                     container: 0,
                 },
-                complianceData: Object,
+                complianceData: null,
                 domains: Array,
                 availableFilters: null,
                 errorRes: null,
@@ -145,7 +145,9 @@
                     let services = new Set();
                     item.workloads.forEach(workload => {
                         let workloadDetails = this.workloadMap.get(workload.id);
-                        services.add(workloadDetails.service);
+                        if (workloadDetails) {
+                            services.add(workloadDetails.service);
+                        }
                     });
                     item.services = Array.from(services);
                     return item;

pkg/neuvector-ui-ext/components/Vulnerabilities/Vulnerabilities.vue

@@ -71,7 +71,7 @@
                 vulQuery: initVulQuery(),
                 pieChartActive: false,
                 selectedVul: null,
-                vulQueryData: Object,
+                vulQueryData: null,
                 domains: Array,
                 errorRes: null,
             };

pkg/neuvector-ui-ext/components/Vulnerabilities/grids/VulnerabilityItemsGrid.vue

@@ -79,6 +79,7 @@
                             })
                             .catch(err => {
                                 console.log(err);
+                                params.failCallback();
                             })
                     },
                 }

pkg/neuvector-ui-ext/types/neuvector.ts

@@ -845,7 +845,7 @@ export const NV_MAP = {
 
 export const nvVariables = {
   currentCluster: '',
-  ns: NV_CONST.NV_SCHEMA,
+  ns: NV_CONST.NV_POD_NAMESPACE,
   authToken: '',
   user: {} as any,
   isRemote: false,

pkg/neuvector-ui-ext/utils/compliance.ts

@@ -250,37 +250,41 @@ export function preprocessCompliance(complianceData: any) {
   complianceData.compliances.forEach((compliance: any) => {
     let domains = new Set();
     compliance.nodes = compliance.nodes.map((nodeId: any) => {
+      if (!complianceData.nodes?.[nodeId]?.[0]) return null;
       complianceData.nodes[nodeId][0].id = nodeId;
       complianceData.nodes[nodeId][0].domains?.forEach((domain: any) => {
         domains.add(domain);
       });
       return complianceData.nodes[nodeId][0];
-    });
+    }).filter((item: any) => item !== null);
     compliance.workloads = compliance.workloads.map((workloadId: any) => {
+      if (!complianceData.workloads?.[workloadId]?.[0]) return null;
       complianceData.workloads[workloadId][0].id = workloadId;
       complianceData.workloads[workloadId][0].domains?.forEach(
         (domain: any) => {
           domains.add(domain);
         }
       );
       return complianceData.workloads[workloadId][0];
-    });
+    }).filter((item: any) => item !== null);
     compliance.platforms = compliance.platforms.map((platformId: any) => {
+      if (!complianceData.platforms?.[platformId]?.[0]) return null;
       complianceData.platforms[platformId][0].id = platformId;
       complianceData.platforms[platformId][0].domains?.forEach(
         (domain: any) => {
           domains.add(domain);
         }
       );
       return complianceData.platforms[platformId][0];
-    });
+    }).filter((item: any) => item !== null);
     compliance.images = compliance.images.map((imageId: any) => {
+      if (!complianceData.images?.[imageId]?.[0]) return null;
       complianceData.images[imageId][0].id = imageId;
       complianceData.images[imageId][0].domains?.forEach((domain: any) => {
         domains.add(domain);
       });
       return complianceData.images[imageId][0];
-    });
+    }).filter((item: any) => item !== null);
     compliance.domains = [...domains];
     compliance.images.sort(sortByDisplayName);
     compliance.workloads.sort(sortByDisplayName);