public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

APIKeys: Add AC controls for legacy API keys (#46255)

Browse Source 
* APIKeys: Add AC controls for legacy API keys

* pluralize actions
This commit is contained in:
J Guerreiro
2022-03-04 19:01:03 +01:00
committed by GitHub
parent b47f5433d7
commit 7f1e8cee2b
3 changed files with 36 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/api/api.go
+4 -3
View File
@@ -260,9 +260,10 @@ func (hs *HTTPServer) registerRoutes() {
// auth api keys
apiRoute.Group("/auth/keys", func(keysRoute routing.RouteRegister) {
keysRoute.Get("/", routing.Wrap(hs.GetAPIKeys))
keysRoute.Post("/", quota("api_key"), routing.Wrap(hs.AddAPIKey))
keysRoute.Delete("/:id", routing.Wrap(hs.DeleteAPIKey))
apikeyIDScope := ac.Scope("apikeys", "id", ac.Parameter(":id"))
keysRoute.Get("/", authorize(reqOrgAdmin, ac.EvalPermission(ac.ActionAPIKeyRead, ac.ScopeAPIKeysAll)), routing.Wrap(hs.GetAPIKeys))
keysRoute.Post("/", authorize(reqOrgAdmin, ac.EvalPermission(ac.ActionAPIKeyCreate)), quota("api_key"), routing.Wrap(hs.AddAPIKey))
keysRoute.Delete("/:id", authorize(reqOrgAdmin, ac.EvalPermission(ac.ActionAPIKeyDelete, apikeyIDScope)), routing.Wrap(hs.DeleteAPIKey))
}, reqOrgAdmin)
// Preferences