grafana

Files

T

grafana-delivery-bot[bot] aea8a5d0e3 [v11.1.x] Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] (#93948 )

Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] (#93940)

Fix endpoint permission on rule write endpoint

(cherry picked from commit c2799b4901)

Co-authored-by: Alexander Weaver <weaver.alex.d@gmail.com>

2024-09-27 14:50:49 -05:00

accesscontrol

[v11.1.x] RBAC: Always store action sets (#92856 )

2024-09-03 15:08:31 +01:00

annotations

[v11.1.x] Annotations: Optimize search by tags (#93610 )

2024-09-23 17:57:25 +02:00

anonymous

Anon: Add support to resolve anonymous identity (#87486 )

2024-05-13 11:06:14 +02:00

apikey

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

apiserver

API server: Add shutdown func to interface (#88827 )

2024-06-06 15:18:54 +01:00

auth

Auth: Introduce pre-logout hooks + add GCOM LogoutHook (#88475 )

2024-05-30 15:52:16 +02:00

authn

Auth: Add org to role mappings support to Google integration (#88891 )

2024-06-07 14:07:35 +02:00

caching

Fixing typos (#70487 )

2023-06-22 09:43:38 +01:00

cleanup

Dashboards: Add feature restore dashboards backend (#83131 )

2024-05-16 14:36:26 -03:00

cloudmigration

Chore: Add unit test for cloudmigration package (#88868 )

2024-06-07 13:46:19 -03:00

contexthandler

Identity: Use typed version of namespace id (#87257 )

2024-05-08 14:03:53 +02:00

correlations

Correlations: Limit access to correlations page to users who can access Explore (#93675 )

2024-09-26 09:57:32 +02:00

dashboardimport

Chore: Fix error handling in postDashboard, remove UserDisplayDTO, fix live redis client initialization (#87206 )

2024-05-06 14:17:34 -04:00

dashboards

Alerting: Export and provisioning rules into subfolders (#77450 )

2024-05-31 11:09:20 +03:00

dashboardsnapshots

Snapshots: Fix panic when snapshot_remove_expired is true (#91232 )

2024-07-31 16:21:58 +03:00

dashboardversion

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

datasourceproxy

Plugins: Preserve trailing slash in plugin proxy (#86859 )

2024-06-05 13:36:14 +02:00

datasources

Access Control: Clean up permissions for deprovisioned data sources (#88483 )

2024-06-03 16:19:53 +03:00

encryption

Tracing: Various improvements (#88308 )

2024-05-27 14:21:40 +02:00

extsvcauth

Better tracing during extSvcAcc registration (#84719 )

2024-03-21 16:41:10 +01:00

featuremgmt

[v11.1.x] Prometheus: Reintroduce Azure audience override feature flag (#90560 )

2024-07-23 11:31:31 +01:00

folder

[v11.1.x] RBAC: List only the folders that the user has access to (#89016 )

2024-07-12 14:54:31 +03:00

gcom

Cloud migrations: create route to delete token (#88297 )

2024-05-31 10:03:43 -03:00

grpcserver

GRPC Service: Use native histogram when enabled (#88804 )

2024-06-05 12:25:09 -06:00

guardian

Chore: Remove use of deprecated method in AC code (#87541 )

2024-05-10 11:56:52 +01:00

hooks

Hooks: Remove AddLoginHook and RunLogin hooks (#73227 )

2023-08-17 09:51:45 +02:00

kmsproviders

Secrets: Make the Migrator extensible (#67307 )

2023-06-19 23:44:01 +02:00

ldap

Chore: Remove use of deprecated method in AC code (#87541 )

2024-05-10 11:56:52 +01:00

libraryelements

LibraryPanels/RBAC: Ignore old folder permission check when deleting/patching lib panel (#88422 )

2024-05-30 12:23:20 +01:00

librarypanels

Chore: Remove cfg from folder service (#87212 )

2024-05-02 13:18:54 +02:00

licensing

Chore: Clean up old navigation (#66287 )

2023-04-14 09:43:11 +01:00

live

[v11.1.x]: Live: Add ha_prefix (#93759 ) (#93925 )

2024-09-27 13:48:06 -05:00

User: Fix GetByID (#86282 )

2024-04-16 15:24:34 +02:00

loginattempt

Chore: Add login protection when user is trying different uppercase letters (#87588 )

2024-05-10 13:49:59 +02:00

navtree

RBAC: Allow plugins to use scoped actions (#90945 )

2024-07-25 17:22:31 +03:00

ngalert

[v11.1.x] Alerting: Fix incorrect permission on POST external rule groups endpoint [CVE-2024-8118] (#93948 )

2024-09-27 14:50:49 -05:00

notifications

[v11.1.x] Notifications: Do not log email address in error message (#89502 )

2024-06-20 20:12:48 +03:00

oauthtoken

AuthN: Use typed namespace id inside authn package (#86048 )

2024-04-24 09:57:34 +02:00

org

OIDC: Support Generic OAuth org to role mappings (#87394 )

2024-05-23 09:55:45 +02:00

playlist

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

plugindashboards

Chore: removing folderId from plugindashboard service (#80570 )

2024-01-16 11:08:39 +01:00

pluginsintegration

RBAC: Allow plugins to use scoped actions (#90945 )

2024-07-25 17:22:31 +03:00

preference

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

provisioning

Alerting: Update mute timings provisioning API to support optimistic locking (#88731 )

2024-06-06 18:06:37 -04:00

publicdashboards

Chore: Remove legacydata package (#88790 )

2024-06-05 22:31:06 +02:00

query

Chore: Remove legacydata package (#88790 )

2024-06-05 22:31:06 +02:00

queryhistory

Chore: Remove legacydata package (#88790 )

2024-06-05 22:31:06 +02:00

quota

Refactor plugin context initialization (#88343 )

2024-05-28 16:59:06 +03:00

rendering

Rendering: add userID in rendering log (#88132 )

2024-05-23 09:41:53 +02:00

screenshot

Chore: Refactor render via http (#84613 )

2024-05-14 07:24:18 -03:00

Dashboards: Add feature restore dashboards backend (#83131 )

2024-05-16 14:36:26 -03:00

searchusers

Grafana: Replace magic number with a constant variable in response status (#80132 )

2024-02-27 18:39:51 +02:00

searchV2

Chore: Replace sqlstore with db interface (#85366 )

2024-04-04 15:04:47 +02:00

secrets

Refactor plugin context initialization (#88343 )

2024-05-28 16:59:06 +03:00

serviceaccounts

Fix: Regenerate token on failed encryption/decryption (#88732 )

2024-06-05 11:56:54 +02:00

shorturls

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

signingkeys

SigningKeys: Add added_at when creating new signing key (#85060 )

2024-03-25 09:58:40 +01:00

sqlstore

User: add second migration for lowercasing login/email of users (#88915 )

2024-06-07 15:07:14 +02:00

ssosettings

SSO: Add the new role value fields for SSO SAML strategy (#88561 )

2024-06-04 15:47:27 +03:00

star

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

stats

User: Add tracing (#87028 )

2024-04-30 13:15:56 +02:00

store

storage: Avoid panic when no previous versions in history (#88880 )

2024-06-06 21:33:08 -04:00

supportbundles

Feature Flags: use FeatureToggles interface where possible (#85131 )

2024-04-04 12:22:31 -04:00

tag

Chore: Update test database initialization (#81673 )

2024-02-09 09:35:39 -05:00

team

Team: Add an endpoint for bulk team membership updates (#87441 )

2024-05-17 13:41:41 +03:00

temp_user

Chore: Make Cfg field private in SQLStore (#85593 )

2024-04-24 10:38:40 +02:00

updatechecker

Chore: Making versioncheck url rely on config instead of being hardcoded (#85855 )

2024-04-11 12:04:53 +02:00

user

Users: remove unused store function (#88784 )

2024-06-06 11:43:51 +02:00

validations

chore: move validations model into the validations service (#61953 )

2023-01-23 15:10:14 -05:00