From 4cea71ee73296c45b1add254c18892a18e273434 Mon Sep 17 00:00:00 2001 From: Ieva Date: Fri, 24 Oct 2025 16:11:58 +0100 Subject: [PATCH] Access Control: Fix the permission checks for saving/updating/deleting annotations (#112953) pass in the correct scope for evaluating annotation permissions on a dashboard --- pkg/registry/apis/dashboard/sub_dto.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/registry/apis/dashboard/sub_dto.go b/pkg/registry/apis/dashboard/sub_dto.go index d3023664f65..30e58e0d22e 100644 --- a/pkg/registry/apis/dashboard/sub_dto.go +++ b/pkg/registry/apis/dashboard/sub_dto.go @@ -147,7 +147,7 @@ func (r *DTOConnector) Connect(ctx context.Context, name string, opts runtime.Ob access.CanStar = user.IsIdentityType(authlib.TypeUser) access.AnnotationsPermissions = &dashboard.AnnotationPermission{} - r.getAnnotationPermissionsByScope(ctx, user, &access.AnnotationsPermissions.Dashboard, accesscontrol.ScopeAnnotationsTypeDashboard) + r.getAnnotationPermissionsByScope(ctx, user, &access.AnnotationsPermissions.Dashboard, dashScope) r.getAnnotationPermissionsByScope(ctx, user, &access.AnnotationsPermissions.Organization, accesscontrol.ScopeAnnotationsTypeOrganization) title := obj.FindTitle("")