Ieva a245531f0c Access control: service account role check (#47710) ...

* forbid setting role higher than user's role

* change response code

* can assign API key permissions to non-admin users

* add: assign viewer role directly upon creation

* refactor: add AddSATcommand infavor of AddAPIkey

* refactor: frontend fixes for ServiceAccountToken

Co-authored-by: eleijonmarck <eric.leijonmarck@gmail.com>

2022-04-13 18:11:03 +02:00

..

accesscontrol

AccessControl: fix value copying in method access and add LogID (#47694)

2022-04-13 17:22:53 +02:00

alerting

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

annotations

Access control: SQL filtering for annotation listing (#47467)

2022-04-11 13:18:38 +01:00

auth

Chore: Remove context.TODO() (#43409)

2021-12-22 11:02:42 +01:00

cleanup

Chore: Remove bus.Dispatch from cleanup service (#45401)

2022-02-15 14:56:19 +01:00

comments

Annotation FGAC checks for comments (#47468)

2022-04-12 17:30:50 +01:00

contexthandler

fix: bug where disabled didnt disable the use of service account (#47688)

2022-04-13 13:40:58 +01:00

dashboardimport

Plugins: Refactor GetPluginDashboards/LoadPluginDashboard (#46316)

2022-03-10 18:38:04 +01:00

dashboards

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

dashboardsnapshots

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

datasourceproxy

Datasource: Fixes storing of secureJSONData when creating/updating datasource (#45290)

2022-02-11 15:52:14 +01:00

datasources

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

encryption

Replace encryption.Service usages by secrets.Service (#41625)

2021-11-12 12:16:39 +01:00

featuremgmt

UsageStats: track enabled features (#47407)

2022-04-08 12:42:33 +02:00

guardian

Access control: use uid for dashboard and folder scopes (#46807)

2022-03-30 15:14:26 +02:00

hooks

Migrate to Wire for dependency injection (#32289)

2021-08-25 15:11:22 +02:00

kmsproviders

Encryption: Refine secrets-related commands (#45201)

2022-02-23 16:04:53 +01:00

ldap

LDAP: Use an interface instead of a bus to get group teams (#42165)

2022-02-01 12:03:21 +01:00

libraryelements

Chore: Remove bus from alerting rule (#47508)

2022-04-08 14:30:25 +02:00

librarypanels

Chore: Remove bus from alerting rule (#47508)

2022-04-08 14:30:25 +02:00

licensing

Access control: Move licensing actions to licensing package (#46588)

2022-03-16 14:37:19 +01:00

live

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

login

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

multildap

remove bus from login (#44995)

2022-02-09 17:17:09 +01:00

ngalert

Alerting: Add check for datasource permission in alert rule read API (#47087)

2022-04-11 17:37:44 -04:00

notifications

chore: remove golang.org/x/net/context in favor of stdlib (#47532)

2022-04-11 08:46:21 -04:00

oauthtoken

Chore: Remove bus from oauthtoken (#46811)

2022-03-21 21:13:57 +01:00

plugindashboards

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

pluginsettings

Plugins: Add plugin settings DTO (#46283)

2022-03-18 20:49:13 +01:00

provisioning

chore: remove golang.org/x/net/context in favor of stdlib (#47532)

2022-04-11 08:46:21 -04:00

query

Propagate all headers (#43812)

2022-01-07 12:45:26 -07:00

queryhistory

Query history: Search in comments (#46761)

2022-04-08 09:35:34 +02:00

quota

Update quota service to accept context (#45186)

2022-02-10 22:17:50 +01:00

rendering

Previews: create crawler auth setup service (#47349)

2022-04-12 19:34:04 +02:00

schemaloader

FeatureFlags: define features outside settings.Cfg (take 3) (#44443)

2022-01-26 09:44:20 -08:00

search

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

searchusers

Bus: Tests cleanup (#46025)

2022-03-02 11:05:31 +01:00

searchV2

Linter: fix linter for golangci-lint version v1.45.0 (#47623)

2022-04-12 08:15:16 -04:00

secrets

Encryption: Make DEKs cache TTL & cleanup interval configurable (#46042)

2022-03-16 20:05:13 +01:00

serviceaccounts

Access control: service account role check (#47710)

2022-04-13 18:11:03 +02:00

shorturls

Migrate to Wire for dependency injection (#32289)

2021-08-25 15:11:22 +02:00

sqlstore

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

store

Storage: remove pointer on write path (#47580)

2022-04-12 16:58:09 +02:00

teamguardian

ValidatedQueries: start of validated queries API (#44731)

2022-03-07 09:33:01 -09:00

thumbs

Previews: track oss adoption

2022-04-13 11:54:49 +02:00

updatechecker

Analytics: Enable grafana and plugin update checks to be operated independently (#46352)

2022-04-06 10:50:21 +02:00

validations

Migrate to Wire for dependency injection (#32289)

2021-08-25 15:11:22 +02:00