From f22b768ce4bd0810f38836865cc26f1f1b768b7b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torkel=20=C3=96degaard?= <torkel@grafana.org>
Date: Wed, 14 Oct 2020 14:07:42 +0200
Subject: [PATCH] Dashboard: Do not allow users without edit permission to a
 folder to see new dashboard page (#28249)

---
 public/app/routes/routes.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/public/app/routes/routes.ts b/public/app/routes/routes.ts
index d308361cabe..c27b65080f0 100644
--- a/public/app/routes/routes.ts
+++ b/public/app/routes/routes.ts
@@ -1,6 +1,8 @@
 import './dashboard_loaders';
 import './ReactContainer';
 import { applyRouteRegistrationHandlers } from './registry';
+import { contextSrv } from 'app/core/services/context_srv';
+
 // Pages
 import LdapPage from 'app/features/admin/ldap/LdapPage';
 import UserAdminPage from 'app/features/admin/UserAdminPage';
@@ -70,6 +72,7 @@ export function setupAngularRoutes($routeProvider: route.IRouteProvider, $locati
       routeInfo: DashboardRouteInfo.New,
       reloadOnSearch: false,
       resolve: {
+        roles: () => (contextSrv.hasEditPermissionInFolders ? [contextSrv.user.orgRole] : ['Admin']),
         component: importDashboardPage,
       },
     })