From 60839d9c305cbac9e98932e2e62fd9ed7dbb3afd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mih=C3=A1ly=20Gy=C3=B6ngy=C3=B6si?=
 <mgyongyosi@users.noreply.github.com>
Date: Wed, 31 Aug 2022 16:58:45 +0200
Subject: [PATCH] RBAC: Config setting to disable permission validation
 (#54447)

* Add scope_validation_enabled config setting to rbac section

* Rename config setting
---
 pkg/setting/setting.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkg/setting/setting.go b/pkg/setting/setting.go
index 961b050f85b..f12f1fd71e3 100644
--- a/pkg/setting/setting.go
+++ b/pkg/setting/setting.go
@@ -452,6 +452,8 @@ type Cfg struct {
 	// Access Control
 	RBACEnabled         bool
 	RBACPermissionCache bool
+	// Enable Permission validation during role creation and provisioning
+	RBACPermissionValidationEnabled bool
 }
 
 type CommandLineArgs struct {
@@ -1354,6 +1356,7 @@ func readAccessControlSettings(iniFile *ini.File, cfg *Cfg) {
 	rbac := iniFile.Section("rbac")
 	cfg.RBACEnabled = rbac.Key("enabled").MustBool(true)
 	cfg.RBACPermissionCache = rbac.Key("permission_cache").MustBool(true)
+	cfg.RBACPermissionValidationEnabled = rbac.Key("permission_validation_enabled").MustBool(true)
 }
 
 func readUserSettings(iniFile *ini.File, cfg *Cfg) error {