Ieva ded90fa28d App platform: Implement perm check with direct db access (#97579) ...

* implement perm check with direct db access

* add tests

* more tests

* Update pkg/services/authz/rbac/service.go

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>

* Update pkg/services/authz/rbac/service.go

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>

* allow fetching permissions for a user who is not a member of the org

* linting

* fix typo

---------

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>

2024-12-12 08:52:14 +00:00

..

accesscontrol

Zanzana: Handle anonymous users (#97171)

2024-12-11 12:22:42 +01:00

annotations

Annotations: Fix composite store read (#94158)

2024-10-03 09:14:06 +02:00

anonymous

Anonymous User: Adds validator service for anonymous users (#94700)

2024-10-18 13:10:41 -03:00

apikey

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

apiserver

K8s: Add APIGroupPostStartHookProvider (#97801)

2024-12-11 19:13:42 +02:00

auth

IAM: align AuthInfo interface (#97228)

2024-12-03 15:11:17 +01:00

authapi

CloudMigration: Create authapi service (#96581)

2024-11-21 20:46:06 +02:00

authn

IAM: align AuthInfo interface (#97228)

2024-12-03 15:11:17 +01:00

authz

App platform: Implement perm check with direct db access (#97579)

2024-12-12 08:52:14 +00:00

caching

Fixing typos (#70487)

2023-06-22 09:43:38 +01:00

cleanup

ShareInternally: Make stale short link expiry optional (#88137)

2024-10-16 11:36:54 +03:00

cloudmigration

CloudMigrations: fix flaky test on snapshot status (#96827)

2024-11-25 09:28:00 +01:00

contexthandler

IAM: remove duplicated functions (#96989)

2024-11-26 09:22:45 +01:00

correlations

Correlations: Allow correlations to target URLs (#92442)

2024-09-24 09:38:17 -05:00

dashboardimport

Identity: remove GetTypedID (#91745)

2024-08-09 18:20:24 +03:00

dashboards

Snapshots: Add RBAC roles for creating and deleting (#96126)

2024-11-26 09:13:17 -03:00

dashboardsnapshots

Zanzana: Search with check server side (#96268)

2024-11-18 14:01:28 +01:00

dashboardversion

Chore: removing (more) redundant transactions (#89373)

2024-06-25 09:19:49 -04:00

datasourceproxy

Plugins: Preserve trailing slash in plugin proxy (#86859)

2024-06-05 13:36:14 +02:00

datasources

Add logging to legacy datasource look up path (#97065)

2024-11-27 14:32:06 -05:00

encryption

fix: pass context into secrets logs (#95944)

2024-11-06 12:52:29 +01:00

extsvcauth

ManagedServiceAccounts: Add a config option to disable the feature on-prem (#93571)

2024-09-27 09:11:59 +02:00

featuremgmt

Zipkin: Run queries through backend (#97754)

2024-12-11 12:31:24 +02:00

folder

K8s/Folders: Improve k8s client implementation of get (#96434)

2024-11-26 16:20:00 +02:00

gcom

CloudMigration: Create authapi service (#96581)

2024-11-21 20:46:06 +02:00

grpcserver

AuthZ: Launch service within IAM app (#96421)

2024-11-20 11:13:33 +01:00

guardian

Folders: Set folder creation permission as part of legacy create (#94040)

2024-10-01 14:03:02 +02:00

hooks

Hooks: Remove AddLoginHook and RunLogin hooks (#73227)

2023-08-17 09:51:45 +02:00

kmsproviders

Secrets: Make the Migrator extensible (#67307)

2023-06-19 23:44:01 +02:00

ldap

Auth: Attach external session info to Grafana session (#93849)

2024-10-08 11:03:29 +02:00

libraryelements

Zanzana: Search with check server side (#96268)

2024-11-18 14:01:28 +01:00

librarypanels

Zanzana: Search with check server side (#96268)

2024-11-18 14:01:28 +01:00

licensing

Navigation: Remove ApplyAdminIA logic (#89113)

2024-06-12 16:45:13 +01:00

live

Requester: Remove duplicated function (#97038)

2024-11-26 15:29:31 +01:00

login

OAuth: Use the attached external session data in OAuthToken and OAuthTokenSync (#96655)

2024-11-27 11:06:39 +01:00

loginattempt

LoginAttempt: Add setting to control max number of attempts before user login gets locked (#97091)

2024-11-28 14:33:18 +01:00

navtree

Requester: Remove duplicated function (#97038)

2024-11-26 15:29:31 +01:00

ngalert

Alerting: Fix alert rules unpausing after moving rule to different folder (#97580)

2024-12-06 14:33:13 -03:00

notifications

Alerting: Support tls config for webhook receiver (#93513)

2024-10-22 12:44:32 +02:00

oauthtoken

OAuth: Use the attached external session data in OAuthToken and OAuthTokenSync (#96655)

2024-11-27 11:06:39 +01:00

org

Stars: Add dashboard_uid and org_id to table (#96408)

2024-11-15 09:51:31 -06:00

playlist

SQL: close rows to release connection (#97147)

2024-11-28 14:28:55 +01:00

plugindashboards

chore(perf): Pre-allocate where possible (enable prealloc linter) (#88952)

2024-06-14 14:16:36 -04:00

pluginsintegration

Plugins: Use grafana-com sso_api_token (#97096)

2024-12-02 16:04:05 +01:00

preference

Theme: Add debug theme behind extraThemes toggle (#95838)

2024-11-05 14:37:09 +00:00

provisioning

Dashboards: Remove unique name constraints (#90687)

2024-10-29 08:58:39 +03:00

publicdashboards

PublicDashboards: Remove publicDashboards FF (#96578)

2024-11-20 11:36:19 -03:00

query

Chore: Bump Go to 1.23.0 (#92105)

2024-08-21 11:40:42 -04:00

queryhistory

Explore: Check for RBAC permissions when hitting query history endpoints (#91156)

2024-07-31 12:10:52 -06:00

quota

Alerting: Make context deadline on AlertNG service startup configurable (#96053)

2024-11-07 18:23:55 +00:00

rendering

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

screenshot

Chore: Refactor render via http (#84613)

2024-05-14 07:24:18 -03:00

search

Stars: Add dashboard_uid and org_id to table (#96408)

2024-11-15 09:51:31 -06:00

searchusers

Auth: Fix missing authLabels from user list page (#94612)

2024-10-11 15:42:32 +03:00

searchV2

Chore: Remove mysqlParseTime feature toggle (#97761)

2024-12-10 15:13:13 -06:00

secrets

Fix: Correct handling of base64 padding during aes-gcm private key decryption. (#96761)

2024-11-21 10:08:48 +01:00

serviceaccounts

API key: Fix API key migration to service account (#97100)

2024-11-28 09:42:58 +02:00

shorturls

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

signingkeys

Fix: Correct handling of base64 padding during aes-gcm private key decryption. (#96761)

2024-11-21 10:08:48 +01:00

sqlstore

Chore: Remove mysqlParseTime feature toggle (#97761)

2024-12-10 15:13:13 -06:00

ssosettings

Auth: Extend the SAMLStrategy with entity_id (#96234)

2024-11-13 10:36:46 +01:00

star

Stars: Add dashboard_uid and org_id to table (#96408)

2024-11-15 09:51:31 -06:00

stats

Revert read replica POC (#93551)

2024-09-25 15:21:39 -08:00

store

Search: Make the existing dashboard parsing code public (#95649)

2024-11-06 07:35:15 +03:00

supportbundles

Chore: Move identity and errutil to apimachinery module (#89116)

2024-06-13 07:11:35 +03:00

tag

Chore: Update test database initialization (#81673)

2024-02-09 09:35:39 -05:00

team

LBAC for datasources: Adds UID to LBAC rules (#96522)

2024-11-26 16:35:04 +00:00

temp_user

Auth: Passwordless Login Option Using Magic Links (#95436)

2024-11-14 08:50:55 -05:00

updatechecker

Chore: Making versioncheck url rely on config instead of being hardcoded (#85855)

2024-04-11 12:04:53 +02:00

user

IAM: align AuthInfo interface (#97228)

2024-12-03 15:11:17 +01:00

validations

chore: move validations model into the validations service (#61953)

2023-01-23 15:10:14 -05:00