From 509cb77bca83bc6cccc7649e88bb7a99c56df7b4 Mon Sep 17 00:00:00 2001 From: "Grot (@grafanabot)" <43478413+grafanabot@users.noreply.github.com> Date: Mon, 24 Oct 2022 15:57:55 +0200 Subject: [PATCH] RBAC: Allow access to `/dashboards` when user has dashboards create (#56712) (#57153) * RBAC: Allow access to dashboards when user has dashboards create * Remove eval any that I didn't add on purpose (cherry picked from commit 3963ed37540891d6447d613d3bfc0b0ebbff5c71) Co-authored-by: Gabriel MABILLE --- pkg/services/navtree/navtreeimpl/navtree.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkg/services/navtree/navtreeimpl/navtree.go b/pkg/services/navtree/navtreeimpl/navtree.go index 839a668da52..a06a76882c1 100644 --- a/pkg/services/navtree/navtreeimpl/navtree.go +++ b/pkg/services/navtree/navtreeimpl/navtree.go @@ -71,7 +71,9 @@ func (s *ServiceImpl) GetNavTree(c *models.ReqContext, hasEditPerm bool, prefs * Children: starredItemsLinks, EmptyMessageId: "starred-empty", }) + } + if hasAccess(ac.ReqSignedIn, ac.EvalAny(ac.EvalPermission(dashboards.ActionDashboardsRead), ac.EvalPermission(dashboards.ActionDashboardsCreate))) { dashboardChildLinks := s.buildDashboardNavLinks(c, hasEditPerm) dashboardsUrl := "/dashboards"