From 5c9dd9b06845387f6f57e0cbcfa2fd385783985c Mon Sep 17 00:00:00 2001 From: Ieva Date: Wed, 15 Oct 2025 15:34:19 +0100 Subject: [PATCH] AuthZ service: Correctly evaluate action sets for dashboard creation (#112425) correctly evaluate dash creation action sets --- pkg/services/authz/rbac/mapper.go | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/pkg/services/authz/rbac/mapper.go b/pkg/services/authz/rbac/mapper.go index cdbe021b315..42bac84c6da 100644 --- a/pkg/services/authz/rbac/mapper.go +++ b/pkg/services/authz/rbac/mapper.go @@ -124,6 +124,13 @@ func newDashboardTranslation() translation { actionSetMapping := make(map[string][]string) for verb, rbacAction := range dashTranslation.verbMapping { var dashActionSets []string + + // Dashboard creation is only part of folder action sets, so we handle it separately + if rbacAction == "dashboards:create" { + dashActionSets = append(dashActionSets, "folders:edit") + dashActionSets = append(dashActionSets, "folders:admin") + } + if slices.Contains(ossaccesscontrol.DashboardViewActions, rbacAction) { dashActionSets = append(dashActionSets, "dashboards:view") dashActionSets = append(dashActionSets, "folders:view")