Access control: use uid for dashboard and folder scopes (#46807)

* use uid:s for folder and dashboard permissions

* evaluate folder and dashboard permissions based on uids

* add dashboard.uid to accept list

* Check for exact suffix

* Check parent folder on create

* update test

* drop dashboard:create actions with dashboard scope

* fix typo

* AccessControl: test id 0 scope conversion

* AccessControl: store only parent folder UID

* AccessControl: extract general as a constant

* FolderServices: Prevent creation of a folder uid'd general

* FolderServices: Test folder creation prevention

* Update pkg/services/guardian/accesscontrol_guardian.go

* FolderServices: fix mock call expect

* FolderServices: remove uneeded mocks

Co-authored-by: jguer <joao.guerreiro@grafana.com>

This commit is contained in:

Karl Persson

2022-03-30 15:14:26 +02:00

committed by

GitHub

co-authored by

jguer

parent 56e9c24f08

commit a5e4a533fa

21 changed files with 369 additions and 256 deletions

									
										pkg/services/accesscontrol/models.go
									
		+2
		-1
	
												View File
												
				@@ -241,7 +241,8 @@ type SetResourcePermissionCommand struct {

				}

				const (

					GlobalOrgID = 0

					GlobalOrgID      = 0

					GeneralFolderUID = "general"

					// Permission actions