Access control: Filter users and teams by read permissions (#45968)

* pass signed in user and filter based on permissions
2022-03-01 10:58:41 +01:00
parent 07dda8a299
commit 18cbfba596
10 changed files with 83 additions and 27 deletions
@@ -82,7 +82,7 @@ type resourcePermissionDTO struct {
 func (a *api) getPermissions(c *models.ReqContext) response.Response {
 	resourceID := web.Params(c.Req)[":resourceID"]

-	permissions, err := a.service.GetPermissions(c.Req.Context(), c.OrgId, resourceID)
+	permissions, err := a.service.GetPermissions(c.Req.Context(), c.SignedInUser, resourceID)
 	if err != nil {
 		return response.Error(http.StatusInternalServerError, "failed to get permissions", err)
 	}