From d5ff95cc42e845b76d16dbfd7bb1fc97a1064ea6 Mon Sep 17 00:00:00 2001 From: George Robinson Date: Fri, 12 May 2023 15:11:26 +0100 Subject: [PATCH] [v8.5.x] Require alert.notifications:write permissions to test receivers and templates (#871) Require alert.notifications:write permissions to test receivers and templates (#865) (cherry picked from commit 3c21ab70075256d4ba8e4fbfdcb15f5a394161fa) --- pkg/services/ngalert/api/authorization.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/services/ngalert/api/authorization.go b/pkg/services/ngalert/api/authorization.go index 0c79d688c1d..41de9811942 100644 --- a/pkg/services/ngalert/api/authorization.go +++ b/pkg/services/ngalert/api/authorization.go @@ -160,7 +160,7 @@ func (api *API) authorize(method, path string) web.Handler { eval = ac.EvalAny(ac.EvalPermission(ac.ActionAlertingNotificationsWrite)) case http.MethodPost + "/api/alertmanager/grafana/config/api/v1/receivers/test": fallback = middleware.ReqEditorRole - eval = ac.EvalPermission(ac.ActionAlertingNotificationsRead) + eval = ac.EvalPermission(ac.ActionAlertingNotificationsWrite) // External Alertmanager Paths case http.MethodDelete + "/api/alertmanager/{Recipient}/config/api/v1/alerts":