Storage: Add authz access client stubs (#95548)

authz stubs

authz stubs

lint fix

Add folder

move check.Name on creat

fix watch

pkg/storage/unified/sql/server.go

@@ -5,14 +5,16 @@ import (
 	"os"
 	"strings"
 
+	"github.com/prometheus/client_golang/prometheus"
+
 	"github.com/grafana/authlib/claims"
+	"github.com/grafana/grafana/pkg/apimachinery/identity"
 	infraDB "github.com/grafana/grafana/pkg/infra/db"
 	"github.com/grafana/grafana/pkg/infra/tracing"
 	"github.com/grafana/grafana/pkg/services/featuremgmt"
 	"github.com/grafana/grafana/pkg/setting"
 	"github.com/grafana/grafana/pkg/storage/unified/resource"
 	"github.com/grafana/grafana/pkg/storage/unified/sql/db/dbimpl"
-	"github.com/prometheus/client_golang/prometheus"
 )
 
 // Creates a new ResourceServer
@@ -48,17 +50,6 @@ func NewResourceServer(ctx context.Context, db infraDB.DB, cfg *setting.Cfg, fea
 	opts.Diagnostics = store
 	opts.Lifecycle = store
 
-	if features.IsEnabledGlobally(featuremgmt.FlagKubernetesFolders) {
-		opts.WriteAccess = resource.WriteAccessHooks{
-			Folder: func(ctx context.Context, user claims.AuthInfo, uid string) bool {
-				// #TODO build on the logic here
-				// #TODO only enable write access when the resource being written in the folder
-				// is another folder
-				return true
-			},
-		}
-	}
-
 	if features.IsEnabledGlobally(featuremgmt.FlagUnifiedStorageSearch) {
 		opts.Index = resource.NewResourceIndexServer(cfg, tracer)
 	}
@@ -70,6 +61,22 @@ func NewResourceServer(ctx context.Context, db infraDB.DB, cfg *setting.Cfg, fea
 
 	// Initialize the indexer if one is configured
 	if opts.Index != nil {
+		// TODO: Create a proper identity for the indexer
+		orgId := int64(1)
+		ctx = identity.WithRequester(ctx, &identity.StaticRequester{
+			Type:           claims.TypeServiceAccount, // system:apiserver
+			UserID:         1,
+			OrgID:          int64(1),
+			Name:           "admin",
+			Login:          "admin",
+			OrgRole:        identity.RoleAdmin,
+			IsGrafanaAdmin: true,
+			Permissions: map[int64]map[string][]string{
+				orgId: {
+					"*": {"*"}, // all resources, all scopes
+				},
+			},
+		})
 		_, err = rs.(resource.ResourceIndexer).Index(ctx)
 		if err != nil {
 			return nil, err