Access control: Support uids for resource permissions (#45226)

* add middleware to solve uid -> id for requests
This commit is contained in:
Karl Persson
2022-02-10 17:47:48 +01:00
committed by GitHub
parent 89a0c0fc37
commit d2b9da9dde
6 changed files with 131 additions and 28 deletions
@@ -0,0 +1,28 @@
package resourcepermissions
import (
"context"
"net/http"
"strconv"
"github.com/grafana/grafana/pkg/models"
"github.com/grafana/grafana/pkg/util"
"github.com/grafana/grafana/pkg/web"
)
type uidSolver func(ctx context.Context, orgID int64, uid string) (int64, error)
func solveUID(solve uidSolver) web.Handler {
return func(c *models.ReqContext) {
if solve != nil && util.IsValidShortUID(web.Params(c.Req)[":resourceID"]) {
params := web.Params(c.Req)
id, err := solve(c.Req.Context(), c.OrgId, params[":resourceID"])
if err != nil {
c.JsonApiErr(http.StatusNotFound, "Resource not found", err)
return
}
params[":resourceID"] = strconv.FormatInt(id, 10)
web.SetURLParams(c.Req, params)
}
}
}