[v9.5.x] Require alert.notifications:write permissions to test receivers and templates (#867)

Require alert.notifications:write permissions to test receivers and templates (#865)

(cherry picked from commit 3c21ab70075256d4ba8e4fbfdcb15f5a394161fa)
(cherry picked from commit 2d4eb6622a48cf5ccd34b6a490a8c9fe2d25aedc)
This commit is contained in:
George Robinson
2023-05-18 10:24:31 +02:00
committed by dsotirakis
parent cfcea75916
commit 4b92020636
+1 -1
View File
@@ -170,7 +170,7 @@ func (api *API) authorize(method, path string) web.Handler {
eval = ac.EvalPermission(ac.ActionAlertingNotificationsRead)
case http.MethodPost + "/api/alertmanager/grafana/config/api/v1/receivers/test":
fallback = middleware.ReqEditorRole
eval = ac.EvalPermission(ac.ActionAlertingNotificationsRead)
eval = ac.EvalPermission(ac.ActionAlertingNotificationsWrite)
// External Alertmanager Paths
case http.MethodDelete + "/api/alertmanager/{DatasourceUID}/config/api/v1/alerts":