WIP: delete permission in API

pkg/api/dashboard_acl.go

@@ -29,3 +29,45 @@ func GetDashboardAcl(c *middleware.Context) Response {
 
 	return Json(200, &query.Result)
 }
+
+func DeleteDashboardAclByUser(c *middleware.Context) Response {
+	dashboardId := c.ParamsInt64(":id")
+	userId := c.ParamsInt64(":userId")
+	cmd := m.RemoveDashboardPermissionCommand{DashboardId: dashboardId, UserId: userId, OrgId: c.OrgId}
+
+	hasPermission, err := guardian.CanDeleteFromAcl(dashboardId, c.OrgRole, c.IsGrafanaAdmin, c.OrgId, c.UserId)
+	if err != nil {
+		return ApiError(500, "Failed to delete from Dashboard ACL", err)
+	}
+
+	if !hasPermission {
+		return Json(403, util.DynMap{"status": "Forbidden", "message": "Does not have access to this Dashboard ACL"})
+	}
+
+	if err := bus.Dispatch(&cmd); err != nil {
+		return ApiError(500, "Failed to delete permission for user", err)
+	}
+
+	return Json(200, "")
+}
+
+func DeleteDashboardAclByUserGroup(c *middleware.Context) Response {
+	dashboardId := c.ParamsInt64(":id")
+	userGroupId := c.ParamsInt64(":userGroupId")
+	cmd := m.RemoveDashboardPermissionCommand{DashboardId: dashboardId, UserGroupId: userGroupId, OrgId: c.OrgId}
+
+	hasPermission, err := guardian.CanDeleteFromAcl(dashboardId, c.OrgRole, c.IsGrafanaAdmin, c.OrgId, c.UserId)
+	if err != nil {
+		return ApiError(500, "Failed to delete from Dashboard ACL", err)
+	}
+
+	if !hasPermission {
+		return Json(403, util.DynMap{"status": "Forbidden", "message": "Does not have access to this Dashboard ACL"})
+	}
+
+	if err := bus.Dispatch(&cmd); err != nil {
+		return ApiError(500, "Failed to delete permission for user", err)
+	}
+
+	return Json(200, "")
+}