9622e7457e
Fix permission query for postgres ( #48543 )
2022-05-02 09:25:23 +02:00
9ed7e48454
AccessControl: Modify provisioning to prevent built-in role assignment ( #48031 )
...
* Add basic and managed prefixes to avoid magic strings
For now let's stick with grafana_builtins
add function isBasic to RoleDTO
add function isBasic to Role
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Add team store to wire
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
2022-04-21 14:14:45 +02:00
7ab1ef8d6e
Access Control: Support other attributes than id for resource permissions ( #46727 )
...
* Add option to set ResourceAttribute for a permissions service
* Use prefix in access control sql filter to parse scopes
* Use prefix in access control metadata to check access
2022-03-21 17:58:18 +01:00
4df7bf5ab2
Access control: Display inherited folder permissions in dashboards ( #46421 )
2022-03-17 17:08:51 +01:00
8261e781d5
Access control: Delete user permissions when a user is deleted ( #46021 )
...
* Remove access control related to user on deletion
2022-03-16 10:43:44 +01:00
8688073564
Access control: Support filter on several actions ( #46524 )
...
* Add support for several actions when creating a acccess control sql
filter
2022-03-14 17:11:21 +01:00
18cbfba596
Access control: Filter users and teams by read permissions ( #45968 )
...
* pass signed in user and filter based on permissions
2022-03-01 10:58:41 +01:00
922b9465ec
Access Control: Add function to set several permissions on a resource in one transaction ( #44768 )
2022-02-07 17:04:32 +01:00
602d62ebcc
Access control: FGAC for team sync endpoints ( #44673 )
...
* add actions for team group sync
* extend the hook to allow specifying whether the user is external
* move user struct to type package
* interface for permission service to allow mocking it
* reuse existing permissions
* test fix
* refactor
* linting
2022-02-03 15:27:05 +00:00
153b231521
AccessControl: Refine interface for AC store ( #44536 )
...
* AccessControl: Refine interface for AC store
* Update pkg/services/accesscontrol/database/resource_permissions.go
2022-01-27 16:47:24 +01:00
de2c5783fa
Access Control: Pass db session to hooks ( #44428 )
...
* Move hook calls to database and pass session
2022-01-25 17:12:00 +01:00
2425828a0b
quote reserved keyword ( #43652 )
2022-01-04 13:35:52 +01:00
ee690a7bb0
Add org_id in join ( #43648 )
2022-01-04 11:13:45 +01:00
b3d5a607d4
Access Control: Add option to filter only managed permissions ( #43371 )
...
* Add option to filter only managed permissions
2021-12-21 14:22:54 +01:00
c3ca2d214d
Access control: Refactor managed permission system to create api and frontend components ( #42540 )
...
* Refactor resource permissions
* Add frondend components for resource permissions
Co-authored-by: kay delaney <45561153+kaydelaney@users.noreply.github.com >
Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com >
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com >
2021-12-20 09:52:24 +01:00
Karl Persson
Gabriel MABILLE
Ieva
J Guerreiro