Ieva d9a39c1553 V9.1.3.1 security patch (#492) (#55515) ...

* apply security fix for admin only folder migration (#482)

* Data source: prevent from using auth proxy header as custom data source header (#474)

* applying changes from 446/fix-user-escalation-through-auth-proxy

* linting

* only validate custom headers if auth proxy is enabled

* import ordering

* add links to CVE

* clean up

* remove typo

Co-authored-by: Karl Persson <kalle.persson@grafana.com>
(cherry picked from commit 0100a6aa9645313b25a79a17d947cbf936cc4e76)
(cherry picked from commit c048378ad5)

2022-09-20 14:57:15 -04:00

..

test

Split Create User (#50502)

2022-06-28 14:32:25 +02:00

action_migrator.go

RBAC: change migration logic (#50187)

2022-06-06 13:51:07 +02:00

admin_only.go

V9.1.3.1 security patch (#492) (#55515)

2022-09-20 14:57:15 -04:00

alerting.go

Alerting: Fix RBAC actions for notification policies (#49185)

2022-05-20 10:55:07 -04:00

dashboard_permissions.go

V9.1.3.1 security patch (#492) (#55515)

2022-09-20 14:57:15 -04:00

errors.go

AccessControl: Team membership migration (#44065)

2022-02-01 14:57:26 +01:00

managed_permission_migrator.go

RBAC: Inheritance permission migration should handle empty managed roles (#50611)

2022-06-10 16:44:13 +02:00

migrations.go

AccessControl: Add migration for seeding managed inherited permissions (#49337)

2022-05-23 16:50:10 +02:00

permission_migrator.go

add logs to debug failing migration (#52447)

2022-07-19 09:34:49 -04:00

team_membership.go

Rename FGAC to RBAC in the codebase (#48051)

2022-04-21 14:31:02 +02:00

util_test.go

AccessControl: Team membership migration (#44065)

2022-02-01 14:57:26 +01:00