IevaandKarl Persson 3282afc648 V8.5.12 security patch (#486) (#55495) ...

* Data source: prevent from using auth proxy header as custom data source header (#477)

* apply security changes for auth proxy permission escalation

* add links to CVE

* remove duplicate check

* apply security fix for admin only folder migration (#484)

Co-authored-by: Karl Persson <kalle.persson@grafana.com>

Co-authored-by: Karl Persson <kalle.persson@grafana.com>

2022-09-20 16:40:52 +01:00

..

permissions

Dashboard Extractor: Don't fail when using default OSS implementation (#46024)

2022-03-02 11:04:29 +01:00

service

V8.5.12 security patch (#486) (#55495)

2022-09-20 16:40:52 +01:00

accesscontrol.go

Access control: Change data source permissions to be based on UID (#46741)

2022-03-24 12:21:26 +01:00

datasources.go

Datasource: Fixes storing of secureJSONData when creating/updating datasource (#45290)

2022-02-11 15:52:14 +01:00

fake_cache_service.go

Alerting: update rule test endpoints to respect data source permissions (#47169)

2022-04-02 02:00:23 +02:00