Revert "Revert "AccessControl: Implement a way to register fixed roles (#35641)" (#37397)" (#37535)

This reverts commit 55efeb0c02.
2021-08-04 14:44:37 +02:00
parent 7fd94e69c3
commit e8e1a0b50b
14 changed files with 954 additions and 232 deletions
@@ -15,6 +15,10 @@ type AccessControl interface {

 	// Middleware checks if service disabled or not to switch to fallback authorization.
 	IsDisabled() bool
+
+	// DeclareFixedRoles allow the caller to declare, to the service, fixed roles and their
+	// assignments to organization roles ("Viewer", "Editor", "Admin") or "Grafana Admin"
+	DeclareFixedRoles(...RoleRegistration) error
 }

 func HasAccess(ac AccessControl, c *models.ReqContext) func(fallback func(*models.ReqContext) bool, permission string, scopes ...string) bool {