Alerting: Protected fields for Contact points (#115442)

* Alerting: Protect sensitive fields of contact points from
 unauthorized modification

- Introduce a new permission alert.notifications.receivers.protected:write. The permission is granted to contact point administrators.
- Introduce field Protected to NotifierOption
- Introduce DiffReport for models.Integrations with focus on Settings. The diff report is extended with methods that return all keys that are different between two settings.
- Add new annotation 'grafana.com/access/CanModifyProtected' to Receiver model
- Update receiver service to enforce the permission and return status 403 if unauthorized user modifies protected field
- Update receiver testing API to enforce permission and return status 403 if unauthorized user modifies protected field.
- Update UI to disable protected fields if user cannot modify them

This commit is contained in:

Yuri Tseretyan

2025-12-16 15:56:02 -05:00

committed by

GitHub

parent 30fb1c032a

commit f2c30cbbd1

37 changed files with 1482 additions and 114 deletions

									
										pkg/services/sqlstore/migrations/migrations.go
									
		+2
		
												View File
												
				@@ -168,4 +168,6 @@ func (oss *OSSMigrations) AddMigration(mg *Migrator) {

					ualert.CollateBinAlertRuleNamespace(mg)

					ualert.CollateBinAlertRuleGroup(mg)

					accesscontrol.AddReceiverProtectedFieldsEditor(mg)

				}