From 4d5a24a6c4a9604174f4b0f2a2c948ae581b88c6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torkel=20=C3=96degaard?= <torkel@grafana.com>
Date: Fri, 9 Feb 2018 17:24:34 +0100
Subject: [PATCH] permissions: might have a solution for search

---
 pkg/services/sqlstore/sqlbuilder.go | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/pkg/services/sqlstore/sqlbuilder.go b/pkg/services/sqlstore/sqlbuilder.go
index 6274458818e..6f3b32be5e7 100644
--- a/pkg/services/sqlstore/sqlbuilder.go
+++ b/pkg/services/sqlstore/sqlbuilder.go
@@ -24,6 +24,26 @@ func (sb *SqlBuilder) writeDashboardPermissionFilter(user *m.SignedInUser, permi
 		okRoles = append(okRoles, m.ROLE_VIEWER)
 	}
 
+	// SELECT dash.id, dash.title, dash.folder_id
+	// FROM dashboard AS dash
+	// 	LEFT JOIN dashboard folder on folder.id = dash.folder_id
+	// 	LEFT JOIN dashboard_acl AS da ON
+	// 			da.dashboard_id = dash.id OR
+	// 			da.dashboard_id = dash.folder_id OR
+	// 			(
+	// 				-- include default permissions -->
+	// 				da.org_id = -1 AND (folder.has_acl = 0 OR (dash.has_acl = 0 AND  dash.folder_id = 0))
+	// 			)
+	// 	LEFT JOIN team_member as ugm on ugm.team_id =  da.team_id
+	// WHERE
+	// 	 dash.org_id = 5 AND
+	// 	 (
+	// 		da.user_id = 8 or
+	// 		ugm.user_id = 8 or
+	// 		da.role in ('Viewer', 'Editor')
+	// 	) AND
+	// 	da.permission > 1
+	//
 	sb.sql.WriteString(` AND
 	(
 		dashboard.has_acl = ` + dialect.BooleanStr(false) + ` OR