public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

IAM: Use the new authorizer for Teams (#113275)

Browse Source 
Use the new authorizer for Teams
This commit is contained in:
Misi
2025-10-31 10:48:01 +00:00
committed by GitHub
parent 1070f94fbb
commit e09deb6889
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/registry/apis/iam/authorizer.go
+1 -1
View File
@@ -24,7 +24,6 @@ func newIAMAuthorizer(accessClient authlib.AccessClient, legacyAccessClient auth
// Identity specific resources
legacyAuthorizer := gfauthorizer.NewResourceAuthorizer(legacyAccessClient)
resourceAuthorizer[iamv0.TeamResourceInfo.GetName()] = legacyAuthorizer
resourceAuthorizer[iamv0.TeamBindingResourceInfo.GetName()] = legacyAuthorizer
resourceAuthorizer["display"] = legacyAuthorizer
@@ -36,6 +35,7 @@ func newIAMAuthorizer(accessClient authlib.AccessClient, legacyAccessClient auth
resourceAuthorizer[iamv0.RoleBindingInfo.GetName()] = authorizer
resourceAuthorizer[iamv0.ServiceAccountResourceInfo.GetName()] = authorizer
resourceAuthorizer[iamv0.UserResourceInfo.GetName()] = authorizer
resourceAuthorizer[iamv0.TeamResourceInfo.GetName()] = authorizer
return &iamAuthorizer{resourceAuthorizer: resourceAuthorizer}
}
pkg/tests/apis/iam/team_integration_test.go
+2 -2
View File
@@ -113,7 +113,7 @@ func doTeamCRUDTestsUsingTheNewAPIs(t *testing.T, helper *apis.K8sTestHelper) {
var statusErr *errors.StatusError
require.ErrorAs(t, err, &statusErr)
require.Equal(t, "Failure", statusErr.ErrStatus.Status)
require.Contains(t, statusErr.ErrStatus.Message, "team not found")
require.Contains(t, statusErr.ErrStatus.Message, "not found")
})
t.Run("should not be able to create team when using a user with insufficient permissions", func(t *testing.T) {
@@ -332,6 +332,6 @@ func doTeamCRUDTestsUsingTheLegacyAPIs(t *testing.T, helper *apis.K8sTestHelper,
var statusErr *errors.StatusError
require.ErrorAs(t, err, &statusErr)
require.Equal(t, "Failure", statusErr.ErrStatus.Status)
require.Contains(t, statusErr.ErrStatus.Message, "team not found")
require.Contains(t, statusErr.ErrStatus.Message, "not found")
})
}