fix (unified-storage): always do perm filtering in bleve by default (#102541)

* make unifiedStorageSearchPermissionFiltering default true
This commit is contained in:
Will Assis
2025-03-21 10:06:01 -04:00
committed by GitHub
parent 2aae523c3f
commit 08bbd7a536
5 changed files with 13 additions and 6 deletions
@@ -814,6 +814,7 @@ export interface FeatureToggles {
unifiedStorageSearchSprinkles?: boolean;
/**
* Enable permission filtering on unified storage search
* @default true
*/
unifiedStorageSearchPermissionFiltering?: boolean;
/**
+1
View File
@@ -407,6 +407,7 @@ func asResourceKey(ns string, k string) (*resource.ResourceKey, error) {
func (s *SearchHandler) getDashboardsUIDsSharedWithUser(ctx context.Context, user identity.Requester) ([]string, error) {
if !s.features.IsEnabledGlobally(featuremgmt.FlagUnifiedStorageSearchPermissionFiltering) {
s.log.Warn("Tried to search for 'sharedwithme' dashboards with ", featuremgmt.FlagUnifiedStorageSearchPermissionFiltering, " disabled")
return []string{}, nil
}
+2 -1
View File
@@ -1399,8 +1399,9 @@ var (
{
Name: "unifiedStorageSearchPermissionFiltering",
Description: "Enable permission filtering on unified storage search",
Stage: FeatureStageExperimental,
Stage: FeatureStageGeneralAvailability,
Owner: grafanaSearchAndStorageSquad,
Expression: "true",
HideFromDocs: true,
HideFromAdminPage: true,
},
+1 -1
View File
@@ -183,7 +183,7 @@ useSessionStorageForRedirection,GA,@grafana/identity-access-team,false,false,fal
rolePickerDrawer,experimental,@grafana/identity-access-team,false,false,false
unifiedStorageSearch,experimental,@grafana/search-and-storage,false,false,false
unifiedStorageSearchSprinkles,experimental,@grafana/search-and-storage,false,false,false
unifiedStorageSearchPermissionFiltering,experimental,@grafana/search-and-storage,false,false,false
unifiedStorageSearchPermissionFiltering,GA,@grafana/search-and-storage,false,false,false
managedDualWriter,experimental,@grafana/search-and-storage,false,false,false
pluginsSriChecks,GA,@grafana/plugins-platform-backend,false,false,false
unifiedStorageBigObjectsSupport,experimental,@grafana/search-and-storage,false,false,false
1 Name Stage Owner requiresDevMode RequiresRestart FrontendOnly
183 rolePickerDrawer experimental @grafana/identity-access-team false false false
184 unifiedStorageSearch experimental @grafana/search-and-storage false false false
185 unifiedStorageSearchSprinkles experimental @grafana/search-and-storage false false false
186 unifiedStorageSearchPermissionFiltering experimental GA @grafana/search-and-storage false false false
187 managedDualWriter experimental @grafana/search-and-storage false false false
188 pluginsSriChecks GA @grafana/plugins-platform-backend false false false
189 unifiedStorageBigObjectsSupport experimental @grafana/search-and-storage false false false
+8 -4
View File
@@ -4263,15 +4263,19 @@
{
"metadata": {
"name": "unifiedStorageSearchPermissionFiltering",
"resourceVersion": "1737489629408",
"creationTimestamp": "2025-01-22T11:38:37Z"
"resourceVersion": "1742564039800",
"creationTimestamp": "2025-01-22T11:38:37Z",
"annotations": {
"grafana.app/updatedTimestamp": "2025-03-21 13:33:59.800619 +0000 UTC"
}
},
"spec": {
"description": "Enable permission filtering on unified storage search",
"stage": "experimental",
"stage": "GA",
"codeowner": "@grafana/search-and-storage",
"hideFromAdminPage": true,
"hideFromDocs": true
"hideFromDocs": true,
"expression": "true"
}
},
{