AuthZ service: Correctly evaluate action sets for dashboard creation (#112425)

correctly evaluate dash creation action sets
2025-10-15 15:34:19 +01:00
parent 2296474f73
commit 5c9dd9b068
1 changed files with 7 additions and 0 deletions
@@ -124,6 +124,13 @@ func newDashboardTranslation() translation {
 	actionSetMapping := make(map[string][]string)
 	for verb, rbacAction := range dashTranslation.verbMapping {
 		var dashActionSets []string
+
+		// Dashboard creation is only part of folder action sets, so we handle it separately
+		if rbacAction == "dashboards:create" {
+			dashActionSets = append(dashActionSets, "folders:edit")
+			dashActionSets = append(dashActionSets, "folders:admin")
+		}
+
 		if slices.Contains(ossaccesscontrol.DashboardViewActions, rbacAction) {
 			dashActionSets = append(dashActionSets, "dashboards:view")
 			dashActionSets = append(dashActionSets, "folders:view")