Plugins App: Switch to resource authorizer (#115019)

This commit is contained in:
Todd Treece
2025-12-10 09:12:26 -05:00
committed by GitHub
parent c4c1708e38
commit ac55fad1ba
6 changed files with 13 additions and 93 deletions
+3 -8
View File
@@ -6,12 +6,12 @@ import (
authlib "github.com/grafana/authlib/types"
appsdkapiserver "github.com/grafana/grafana-app-sdk/k8s/apiserver"
"k8s.io/apiserver/pkg/authorization/authorizer"
pluginsapp "github.com/grafana/grafana/apps/plugins/pkg/app"
"github.com/grafana/grafana/apps/plugins/pkg/app/meta"
"github.com/grafana/grafana/pkg/services/accesscontrol"
"github.com/grafana/grafana/pkg/services/apiserver/appinstaller"
grafanaauthorizer "github.com/grafana/grafana/pkg/services/apiserver/auth/authorizer"
)
var (
@@ -37,18 +37,13 @@ func ProvideAppInstaller(accessControlService accesscontrol.Service, accessClien
cloudProvider := meta.NewCatalogProvider(grafanaComAPIURL)
metaProviderManager := meta.NewProviderManager(coreProvider, cloudProvider)
i, err := pluginsapp.ProvideAppInstaller(metaProviderManager)
authorizer := grafanaauthorizer.NewResourceAuthorizer(accessClient)
i, err := pluginsapp.ProvideAppInstaller(authorizer, metaProviderManager)
if err != nil {
return nil, err
}
i.WithAccessChecker(accessClient)
return &AppInstaller{
PluginAppInstaller: i,
}, nil
}
func (a *AppInstaller) GetAuthorizer() authorizer.Authorizer {
return pluginsapp.GetAuthorizer()
}