Jo
9eea0e99fc
Chore: Use UIDs as identifiers for teams frontend ( #94345 )
...
* Team frontend now uses UIDs as identifiers. Safe to revert
2024-10-08 09:48:35 +02:00
Jo
acd13e05ef
Teams: Support team UIDs in APIs ( #94011 )
...
* support team UIDs in APIs
* unify middleware logic and add team tests
* add UID test to resource permissions
* remove unused middleware
2024-10-07 10:18:24 +02:00
Karl Persson
ddee95cb6d
Team: Create permission type for team membership ( #92352 )
...
* Create permission type enum for team and remove usage of dashboard permission type
2024-08-23 12:34:34 +02:00
Karl Persson
8bcd9c2594
Identity: Remove typed id ( #91801 )
...
* Refactor identity struct to store type in separate field
* Update ResolveIdentity to take string representation of typedID
* Add IsIdentityType to requester interface
* Use IsIdentityType from interface
* Remove usage of TypedID
* Remote typedID struct
* fix GetInternalID
2024-08-13 10:18:28 +02:00
Ryan McKinley
21d4a4f49e
Auth: use IdentityType from authlib ( #91763 )
2024-08-12 09:26:53 +03:00
Karl Persson
bcfb66b416
Identity: remove GetTypedID ( #91745 )
2024-08-09 18:20:24 +03:00
Ryan McKinley
9db3bc926e
Identity: Rename "namespace" to "type" in the requester interface ( #90567 )
2024-07-25 12:52:14 +03:00
Alexander Zobnin
87d86e81ce
Zanzana: Evaluate permissions alongside with RBAC engine ( #90064 )
...
* Zanzana: Evaluate permissions if feature flag enabled
* Fix tests
* adjust logs
* fix spelling
* remove unused
* only evaluate implemented resources
* refactor
2024-07-05 11:31:23 +02:00
Jeff Levin
cfe8317d45
Add auth spans and remove deduplication code for scopes ( #89804 )
...
Adds more spans for timing in accesscontrol and remove permission deduplicating code after benchmarking
---------
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
Co-authored-by: Dave Henderson <dave.henderson@grafana.com >
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com >
2024-07-02 22:08:57 -08:00
Ryan McKinley
99d8025829
Chore: Move identity and errutil to apimachinery module ( #89116 )
2024-06-13 07:11:35 +03:00
Ieva
da1a99d729
Team: Add an endpoint for bulk team membership updates ( #87441 )
...
* add an endpoint for bulk team membership updates
* update comment
* schema gen
* test fix
* add swagger parameter definition
2024-05-17 13:41:41 +03:00
Ieva
167151b211
Chore: Remove use of deprecated method in AC code ( #87541 )
...
* switch from using cfg to using featuremgmt for checking a feature toggle in AC code
* merge test fixes
2024-05-10 11:56:52 +01:00
Ieva
cee713e34c
Chore: Add tracing to team service ( #86999 )
...
* add tracing to team service
* another test fix
* pass in context for team creation and membership checking
2024-04-29 11:32:03 +01:00
Ieva
748b3c855c
Chore: Clean up team membership code ( #86914 )
...
remove unused code, clean up commands
2024-04-25 16:46:24 +01:00
Gabriel MABILLE
8d9921a5ba
RBAC: Fix delete team permissions on team delete ( #83442 )
...
* RBAC: Remove team permissions on delete
* Remove unecessary deletes from store function
* Nit on mock
* Add test to the database
* Nit on comment
* Add another test to check that other permissions remain
2024-02-27 12:21:26 +01:00
Marcus Efraimsson
6768c6c059
Chore: Remove public vars in setting package ( #81018 )
...
Removes the public variable setting.SecretKey plus some other ones.
Introduces some new functions for creating setting.Cfg.
2024-01-23 12:36:22 +01:00
Jo
0de66a8099
Authz: Remove use of SignedInUser copy for permission evaluation ( #78448 )
...
* remove use of SignedInUserCopies
* add extra safety to not cross assign permissions
unwind circular dependency
dashboardacl->dashboardaccess
fix missing import
* correctly set teams for permissions
* fix missing inits
* nit: check err
* exit early for api keys
2023-11-22 14:20:22 +01:00
Alexander Zobnin
c0d8a7132e
Teams: Search by team ids ( #77730 )
...
* Teams: Search by team ids
* Add tests
* Fix tests
2023-11-06 18:08:11 +02:00
Jo
466f8a1f5a
Teams: Move team API to own service ( #76347 )
...
* move team API to its own service
* remove uneeded import
* reshare pref api logic
2023-10-12 10:10:54 +02:00
