From 095ca66d9f1e4b1951dc56b5a985646dfe61dee7 Mon Sep 17 00:00:00 2001 From: Ieva Date: Tue, 11 Jun 2024 10:37:16 +0300 Subject: [PATCH] RBAC: List only the folders that the user has access to (#88599) only check folder permissions when listing folders --- pkg/services/folder/folderimpl/folder.go | 2 -- 1 file changed, 2 deletions(-) diff --git a/pkg/services/folder/folderimpl/folder.go b/pkg/services/folder/folderimpl/folder.go index 4411819fbb9..138de76c327 100644 --- a/pkg/services/folder/folderimpl/folder.go +++ b/pkg/services/folder/folderimpl/folder.go @@ -357,10 +357,8 @@ func (s *Service) getRootFolders(ctx context.Context, q *folder.GetChildrenQuery var folderPermissions []string if q.Permission == dashboardaccess.PERMISSION_EDIT { folderPermissions = permissions[dashboards.ActionFoldersWrite] - folderPermissions = append(folderPermissions, permissions[dashboards.ActionDashboardsWrite]...) } else { folderPermissions = permissions[dashboards.ActionFoldersRead] - folderPermissions = append(folderPermissions, permissions[dashboards.ActionDashboardsRead]...) } if len(folderPermissions) == 0 && !q.SignedInUser.GetIsGrafanaAdmin() {