public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

RBAC: Only store action sets for dashboards and folders (#89053)

Browse Source 
* don't store action sets for resources other than dashboards and folders

* remove unneeded comment
This commit is contained in:
Ieva
2024-06-13 12:06:48 +03:00
committed by GitHub
parent 7e9e5f5346
commit 1ac395b785
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/services/accesscontrol/resourcepermissions/store.go
+1 -1
View File
@@ -707,7 +707,7 @@ func (s *store) createPermissions(sess *db.Session, roleID int64, cmd SetResourc
}
func (s *store) shouldStoreActionSet(permission string) bool {
return (s.features.IsEnabled(context.TODO(), featuremgmt.FlagAccessActionSets) && permission != "")
return (s.features.IsEnabled(context.TODO(), featuremgmt.FlagAccessActionSets) && permission != "" && isFolderOrDashboardAction(permission))
}
func deletePermissions(sess *db.Session, ids []int64) error {