Grot (@grafanabot)andIeva b9c1a3e7f6 [v9.0.x] Access control: role checks before updates (#52900) ...

* Access control: role checks before updates (#51449)

* add role checks

* linting

(cherry picked from commit 0c0cf36ab8)

* fix tests

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>

2022-07-27 13:17:25 -04:00

..

apierrors

Plugins: Refactor plugin dashboards (#44315)

2022-01-28 10:28:33 +01:00

avatar

Dashboard: Mix initials and custom gravatars in recent viewers list (#47212)

2022-04-05 22:56:17 -04:00

datasource

Check for empty URLs when creating/updating a data source (#42837)

2022-01-31 12:39:55 -03:00

docs

API: Fix swagger specification (#50034) (#50060)

2022-06-02 10:09:39 +02:00

dtos

resolve conflicts (#50184)

2022-06-03 18:03:45 +02:00

frontendlogging

Logger migration from log15 to gokit/log (#41636)

2022-01-06 22:28:05 +08:00

navlinks

Chore: Remove newNavigation feature toggle and old navbar code (#50872) (#50932)

2022-06-16 11:26:46 +01:00

pluginproxy

resolve conflicts (#50184)

2022-06-03 18:03:45 +02:00

response

Quick Ugly Fix for Oauth not to make web_hack.go panic (#49653) (#49797)

2022-05-30 11:55:03 +02:00

routing

Instrumentation: Fix HTTP request instrumentation of authentication failures (#44234)

2022-02-02 18:48:46 +01:00

static

API: Extract OpenAPI specification from source code using go-swagger (#40528)

2022-02-08 13:38:43 +01:00

accesscontrol.go

Access control: Allow organisation admins to add existing users to org (#51668) (#52553)

2022-07-21 11:44:20 +02:00

admin_encryption.go

Encryption: Add support for multiple data keys per day (#47765)

2022-05-23 13:13:55 +02:00

admin_provisioning_test.go

Chore: Add context to org (#40685)

2021-11-03 11:31:56 +01:00

admin_provisioning.go

Chore: Remove Dispatch and AddHandler (#42603)

2021-12-02 18:08:59 +01:00

admin_test.go

Chore: Remove bus from admin (#44920)

2022-02-04 17:53:58 +01:00

admin_users_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

admin_users.go

fix status code 200 (#47818)

2022-04-15 08:01:58 -04:00

admin.go

fix status code 200 (#47818)

2022-04-15 08:01:58 -04:00

alerting_test.go

Alerting: Disable /api/admin/pause-all-alerts with Unified Alerting (#51895) (#52077)

2022-07-14 16:58:37 +08:00

alerting.go

Alerting: use static channel configuration to determinate secure fields (#52527) (#52570)

2022-07-20 18:34:58 -04:00

annotations_test.go

chore: replace artisanal FakeDashboardService with generated mock (#49276)

2022-05-23 11:14:27 -04:00

annotations.go

backend/services: Move GetDashboard from sqlstore to dashboard service (#48971)

2022-05-17 14:52:22 -04:00

api.go

Access control: Allow organisation admins to add existing users to org (#51668) (#52553)

2022-07-21 11:44:20 +02:00

apikey.go

Access control: Pass access control metadata for api keys (#48445)

2022-04-29 15:30:24 +02:00

app_routes.go

Instrumentation: Proxy status code correction and various improvements (#47473)

2022-04-11 13:17:08 +02:00

basic_auth_test.go

Macaron: remove custom Request type (#37874)

2021-09-01 11:18:30 +02:00

basic_auth.go

Macaron: remove custom Request type (#37874)

2021-09-01 11:18:30 +02:00

comments.go

fix status code 200 (#47818)

2022-04-15 08:01:58 -04:00

common_test.go

AccessControl: Replace IsEnterprise checks with license checks (#49572) (#49646)

2022-05-25 20:59:47 +02:00

dashboard_permission_test.go

backend/services: Move GetDashboard from sqlstore to dashboard service (#48971)

2022-05-17 14:52:22 -04:00

dashboard_permission.go

AccessControl: Create own interface and impl for each permission service (#48871)

2022-05-10 15:48:47 +02:00

dashboard_public_config_test.go

chore: replace artisanal FakeDashboardService with generated mock (#49276)

2022-05-23 11:14:27 -04:00

dashboard_public_config.go

add isPublic to dashboard (#48012)

2022-05-17 14:11:55 -08:00

dashboard_snapshot_test.go

Do not check permissions while deleting external snapshot (#51897) (#51904)

2022-07-07 15:45:32 +02:00

dashboard_snapshot.go

Do not check permissions while deleting external snapshot (#51897) (#51904)

2022-07-07 15:45:32 +02:00

dashboard_test.go

Export: Fix export/import of dash with library panels (#49319) (#51760)

2022-07-14 11:17:12 +01:00

dashboard.go

Preferences: Get home dashboard from teams (#52225) (#52229)

2022-07-14 17:09:36 +02:00

dataproxy.go

Alerting: modify alertmanager endpoints for proxying using the datasource UID (#47978)

2022-04-29 10:25:22 +03:00

datasources_test.go

Secrets: Implement basic unified secret store service (#45804)

2022-04-25 13:57:45 -03:00

datasources.go

Datasource: Propagate datasource secret decryption errors to the frontend (#52068) (#52557)

2022-07-20 18:03:44 -03:00

fakes.go

[v9.0.x] Plugins: Register management endpoints only when external managed is also false (#51817)

2022-07-07 11:19:32 +02:00

folder_permission_test.go

backend/services: Move GetDashboard from sqlstore to dashboard service (#48971)

2022-05-17 14:52:22 -04:00

folder_permission.go

Access control: refactor RBAC checks (#48107)

2022-04-25 10:42:09 +02:00

folder_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

folder.go

SearchV2: instant local updates, folder events (#50001) (#50194)

2022-06-03 22:29:48 +02:00

frontend_logging_test.go

Security: Sync security changes on main (#45083)

2022-02-09 13:44:38 +01:00

frontend_logging.go

Logger migration from log15 to gokit/log (#41636)

2022-01-06 22:28:05 +08:00

frontend_metrics.go

Chore: Report frontend metrics for JS/CSS load time (#42421)

2021-12-02 09:34:39 +01:00

frontendsettings_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

frontendsettings.go

AccessControl: Use RBACBuiltInRoleAssignmentEnabled in the frontend instead of FeatureToggle (#49261)

2022-05-20 06:53:28 +00:00

grafana_com_proxy.go

Instrumentation: Proxy status code correction and various improvements (#47473)

2022-04-11 13:17:08 +02:00

health_test.go

Chore: Remove bus from health api (#44897)

2022-02-04 14:33:35 +01:00

health.go

Chore: Remove bus from health api (#44897)

2022-02-04 14:33:35 +01:00

http_server_test.go

Plugins: Make backend plugin metrics endpoints available with optional authentication (#46467)

2022-03-29 11:18:26 +02:00

http_server.go

[v9.0.x] CSRF: Fix additional headers option (#52347)

2022-07-19 07:50:31 +01:00

index.go

Alerting: Add legacy indicator to navbar (#49511) (#49614)

2022-06-28 10:38:58 +02:00

ldap_debug_test.go

Tracing: Use common traceID context value for opentracing and opentelemetry (#46411)

2022-04-14 17:54:49 +02:00

ldap_debug.go

Security: Fixes for CVE-2022-31107 and CVE-2022-31097 (#52279)

2022-07-14 14:56:53 -05:00

login_oauth_test.go

OAuth: Redirect to login if no oauth module is found or if module is not configured (#50661) (#50702)

2022-06-13 17:14:49 +02:00

login_oauth.go

Security: Fixes for CVE-2022-31107 and CVE-2022-31097 (#52279)

2022-07-14 14:56:53 -05:00

login_test.go

Logging: Unify logging fakes (#48822)

2022-05-06 17:44:22 +02:00

login.go

fix status code 200 (#47818)

2022-04-15 08:01:58 -04:00

metrics_test.go

Datasource: Propagate datasource secret decryption errors to the frontend (#52068) (#52557)

2022-07-20 18:03:44 -03:00

metrics.go

Datasource: Propagate datasource secret decryption errors to the frontend (#52068) (#52557)

2022-07-20 18:03:44 -03:00

org_invite_test.go

Access control: Allow organisation admins to add existing users to org (#51668) (#52553)

2022-07-21 11:44:20 +02:00

org_invite.go

[v9.0.x] Access control: role checks before updates (#52900)

2022-07-27 13:17:25 -04:00

org_test.go

ValidatedQueries: start of validated queries API (#44731)

2022-03-07 09:33:01 -09:00

org_users_test.go

[v9.0.x] Access control: role checks before updates (#52900)

2022-07-27 13:17:25 -04:00

org_users.go

[v9.0.x] Access control: role checks before updates (#52900)

2022-07-27 13:17:25 -04:00

org.go

Chore: Remove final x from sqlstore (#48086)

2022-04-25 13:07:11 -04:00

password.go

fix status code 200 (#47818)

2022-04-15 08:01:58 -04:00

playlist_play.go

backend: add PlaylistUIDs to Playlist; remove playlist IDs from API (#49609) (#50828)

2022-06-14 15:48:44 -04:00

playlist.go

backend: add PlaylistUIDs to Playlist; remove playlist IDs from API (#49609) (#50828)

2022-06-14 15:48:44 -04:00

plugin_dashboards_test.go

Plugins: Refactor GetPluginDashboards/LoadPluginDashboard (#46316)

2022-03-10 18:38:04 +01:00

plugin_dashboards.go

Plugins: Refactor GetPluginDashboards/LoadPluginDashboard (#46316)

2022-03-10 18:38:04 +01:00

plugin_metrics_test.go

Plugins: Make backend plugin metrics endpoints available with optional authentication (#46467)

2022-03-29 11:18:26 +02:00

plugin_metrics.go

Plugins: Make backend plugin metrics endpoints available with optional authentication (#46467)

2022-03-29 11:18:26 +02:00

plugin_resource.go

Plugins: Refactor plugin resource call with and without data source (#48754)

2022-05-06 10:58:02 +02:00

plugins_test.go

[v9.0.x] Plugins: Register management endpoints only when external managed is also false (#51817)

2022-07-07 11:19:32 +02:00

plugins.go

Plugins: Support headers field for check health (#49930) (#49949)

2022-05-31 18:22:35 +02:00

preferences_test.go

chore: replace artisanal FakeDashboardService with generated mock (#49276)

2022-05-23 11:14:27 -04:00

preferences.go

Preferences: Fix updating of preferences for Navbar and Query History (#49677) (#49694)

2022-05-26 14:57:55 +02:00

quota_test.go

ValidatedQueries: start of validated queries API (#44731)

2022-03-07 09:33:01 -09:00

quota.go

fix status code 200 (#47818)

2022-04-15 08:01:58 -04:00

render.go

Dash previews: populate crawler queue from SQL query (#44083)

2022-02-09 13:23:32 +04:00

search_test.go

AccessControl: Add metadata to search result (#48879)

2022-05-17 15:51:44 +02:00

search.go

[v9.0.x] Search (SQL): support dashboardUID query parameter (#50126)

2022-06-02 18:10:29 -07:00

short_url_test.go

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

short_url.go

fix status code 200 (#47818)

2022-04-15 08:01:58 -04:00

signup.go

[v9.0.x] Chore: Remove global bus variable (#51126)

2022-06-21 11:40:44 +02:00

stars.go

[v9.0.x] SearchV2 - Fix starred dashboards for new organizations error (#49649)

2022-05-25 21:10:21 +02:00

swagger.go

fix status code 200 (#47818)

2022-04-15 08:01:58 -04:00

team_members_test.go

Rename FGAC to RBAC in the codebase (#48051)

2022-04-21 14:31:02 +02:00

team_members.go

AccessControl: Create own interface and impl for each permission service (#48871)

2022-05-10 15:48:47 +02:00

team_test.go

backend/services: Move GetDashboard from sqlstore to dashboard service (#48971)

2022-05-17 14:52:22 -04:00

team.go

Access control: refactor RBAC checks (#48107)

2022-04-25 10:42:09 +02:00

user_test.go

Security: Fixes for CVE-2022-31107 and CVE-2022-31097 (#52279)

2022-07-14 14:56:53 -05:00

user_token_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

user_token.go

fix status code 200 (#47818)

2022-04-15 08:01:58 -04:00

user.go

RBAC: Make RBAC action names more consistent (#49730) (#50083)

2022-06-02 15:15:40 +02:00

utils.go

Permissions: Validate against Team/User permission role update (#29101)

2020-11-18 15:36:41 +01:00