linoman eeb4c045d3 SCIM: Add access control for non provisioned users (#103596) ...

* Add hook to validate access for users based on provisioning logic

* Wire the hook

* Add tests

* declare new variables for errors

* rework the authorization flow for provisioned users

* Add scim feature to testinfra opts

* Grant access if the identity doesn't have associated a user

* skip external uid check for subsequent calls

* Update tests

2025-04-08 22:50:39 +02:00

..

accesscontrol

Authorization: Add group to role DisplayName to make filtered list more clear (#102950)

2025-04-08 09:15:03 -05:00

annotations

Alerting: Remove feature toggles relating to Loki Alert State History (#103540)

2025-04-08 09:50:27 -04:00

anonymous

anonstore: Fix more test failures in anonstore package. (#103459)

2025-04-08 14:57:59 +02:00

apikey

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

apiserver

UniStore/Large Objects: Make threshold configurable (#101774)

2025-04-08 10:50:35 +02:00

auth

Pass BOOL values as real types (int/bool) instead of strings to SQL parameters. (#101961)

2025-03-12 15:40:11 +01:00

authapi

CloudMigration: Create authapi service (#96581)

2024-11-21 20:46:06 +02:00

authn

SCIM: Add access control for non provisioned users (#103596)

2025-04-08 22:50:39 +02:00

authz

Zanzana: Perform shadow requests (#103444)

2025-04-08 10:03:35 +02:00

caching

Fixing typos (#70487)

2023-06-22 09:43:38 +01:00

cleanup

Dashboard Restore: Remove experimental functionality under feature flag dashboardRestore for now - this will be reworked (#103204)

2025-04-03 02:52:54 -05:00

cloudmigration

CloudMigrations: Create resource dependency map to validate snapshot request (#102594)

2025-04-08 17:46:25 +02:00

contexthandler

ContextHandler: unexport cfg (#101396)

2025-02-27 12:03:03 +01:00

correlations

Zanzana: Remove usage from legacy access control (#98883)

2025-01-14 10:26:15 +01:00

dashboardimport

Schema V2: Adjust quick_ranges in time settings and remove time_options (#100135)

2025-02-12 19:23:09 +00:00

dashboards

Dashboards: Prevent saving to a non-existent folder (#103503)

2025-04-07 09:02:20 +03:00

dashboardsnapshots

App platform: Add cleanup job for dashboards when going through /apis (kubectl) (#102506)

2025-03-22 23:47:27 +01:00

dashboardversion

i18n: wires up translations for plugins (#102853)

2025-03-31 06:38:38 +02:00

datasourceproxy

Plugins: Modify interface for plugin validations to allow taking PDC into account (#96089)

2025-01-24 17:01:46 +02:00

datasources

datasources: Use fewer datasources in tests. (#103091)

2025-03-31 15:20:03 +02:00

encryption

Chore: update workspace (#102759)

2025-03-25 11:20:23 +02:00

extsvcauth

ManagedServiceAccounts: Add a config option to disable the feature on-prem (#93571)

2024-09-27 09:11:59 +02:00

featuremgmt

Remove nodeGraphDotLayout feature toggle (#103541)

2025-04-08 15:37:17 +01:00

folder

chore(folders): add extended tracing to the folders service (#103007)

2025-04-03 11:54:47 +02:00

gcom

CloudMigrations: Remove onPremToCloudMigrationsAuthApiMig feature flag (#99368)

2025-01-24 13:53:58 -03:00

grpcserver

Use authlib repo. Use otel (#103178)

2025-04-07 15:47:40 +02:00

guardian

Config: Removes setting viewers_can_edit (#102275)

2025-03-25 13:55:59 +00:00

hooks

Hooks: Remove AddLoginHook and RunLogin hooks (#73227)

2023-08-17 09:51:45 +02:00

kmsproviders

Secrets: Make the Migrator extensible (#67307)

2023-06-19 23:44:01 +02:00

ldap

Zanzana: Remove usage from legacy access control (#98883)

2025-01-14 10:26:15 +01:00

libraryelements

App Platform: Remove mutable globals (#102962)

2025-03-27 15:46:09 +01:00

librarypanels

App Platform: Remove mutable globals (#102962)

2025-03-27 15:46:09 +01:00

licensing

Navigation: Remove ApplyAdminIA logic (#89113)

2024-06-12 16:45:13 +01:00

live

AppPlatform: Introduce experimental Github integration for dashboard configuration management (#96329)

2025-03-25 08:59:03 +01:00

login

authinfoimpl: Fix TestIntegrationAuthInfoStore when running on Spanner. (#103383)

2025-04-04 11:20:48 +02:00

loginattempt

Auth: Add IP address login attempt validation (#98123)

2025-02-05 20:16:36 +02:00

navtree

Provisioning: Update onboarding page (#103436)

2025-04-04 13:08:58 +03:00

ngalert

Alerting: Remove feature toggles relating to Loki Alert State History (#103540)

2025-04-08 09:50:27 -04:00

notifications

Alerting: Update grafana/alerting (#101215)

2025-02-25 11:32:28 +01:00

oauthtoken

Authlib: Use types package rather than claims (#99243)

2025-01-21 12:06:55 +03:00

org

SCIM: Add a distinctive label for externally provisioned users (#102701)

2025-03-25 10:06:45 +01:00

playlist

SQL: close rows to release connection (#97147)

2024-11-28 14:28:55 +01:00

plugindashboards

K8s: Fix plugin updater (#101843)

2025-03-08 02:42:20 +02:00

pluginsintegration

Authorization: Add group to role DisplayName to make filtered list more clear (#102950)

2025-04-08 09:15:03 -05:00

preference

i18n: Add locale to backend (#102233)

2025-03-31 15:59:07 +02:00

provisioning

App Platform: Remove mutable globals (#102962)

2025-03-27 15:46:09 +01:00

publicdashboards

Dashboards: Prevent saving to a non-existent folder (#103503)

2025-04-07 09:02:20 +03:00

query

Plugins: Modify interface for plugin validations to allow taking PDC into account (#96089)

2025-01-24 17:01:46 +02:00

queryhistory

Config: Removes setting viewers_can_edit (#102275)

2025-03-25 13:55:59 +00:00

quota

App Platform: Remove mutable globals (#102962)

2025-03-27 15:46:09 +01:00

rendering

Image Render: Propagate traces in HTTP mode (#100559)

2025-03-06 12:02:00 -05:00

screenshot

Chore: Refactor render via http (#84613)

2024-05-14 07:24:18 -03:00

search

K8s: Search fallback: Support all sort by methods (#100776)

2025-02-18 12:30:11 -06:00

searchusers

Auth: Fix missing authLabels from user list page (#94612)

2024-10-11 15:42:32 +03:00

searchV2

Dashboard Restore: Remove experimental functionality under feature flag dashboardRestore for now - this will be reworked (#103204)

2025-04-03 02:52:54 -05:00

secrets

AppPlatform: Introduce experimental Github integration for dashboard configuration management (#96329)

2025-03-25 08:59:03 +01:00

serviceaccounts

Authorization: Add group to role DisplayName to make filtered list more clear (#102950)

2025-04-08 09:15:03 -05:00

shorturls

Hackaton: Add more unit tests, take 2 (#101473)

2025-03-03 13:12:13 +01:00

signingkeys

Remove unused SigningKey struct. (#102041)

2025-03-14 10:41:10 +01:00

sqlstore

Switch to using in-mem sequence generator only when explicitly configured in connection string. Move spanner-related functions to pkg/util/spanner. (#103363)

2025-04-08 16:36:37 +02:00

ssosettings

ssosettings: Don't update primary key in sso_setting table. (#102878)

2025-03-26 13:06:29 +01:00

star

spanner: Fix star migration that fills NULL dashboard_uid and org_id fields from dashboard table. (#102768)

2025-03-26 11:15:00 +01:00

stats

Stats: Optimize getting folder stats (#103033)

2025-03-28 20:17:50 -05:00

store

Plugins: Remove support for secrets manager plugins (#101467)

2025-03-20 10:00:59 +00:00

supportbundles

Authorization: Add group to role DisplayName to make filtered list more clear (#102950)

2025-04-08 09:15:03 -05:00

tag

Hackaton: Add more unit tests, take 2 (#101473)

2025-03-03 13:12:13 +01:00

team

Teams: Restrict provisioned teams from being updated and deleted (#103454)

2025-04-08 11:27:30 +03:00

temp_user

Auth: Passwordless Login Option Using Magic Links (#95436)

2024-11-14 08:50:55 -05:00

updatechecker

Hackaton: Add more unit tests, take 2 (#101473)

2025-03-03 13:12:13 +01:00

user

unified-storage: Reduce calls to the user service (#102934)

2025-03-27 22:01:07 +02:00

validations

Plugins: Modify interface for plugin validations to allow taking PDC into account (#96089)

2025-01-24 17:01:46 +02:00