88259da745
* Access control: Use composite cache key for team permissions * use composite key for teams * use cache for hotpath (getCachedUserPermissions) * don't cache empty teams set * don't pass permissions as argument * early return if no teams found * reload cache correctly * optimize allocations * Clear user's teams cache * remove composite cache for teams * fix linter * don't clear teams permissions * pre-allocate memory for basic roles permissions
44 lines
1.3 KiB
Go
44 lines
1.3 KiB
Go
package accesscontrol
|
|
|
|
import (
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/grafana/grafana/pkg/apimachinery/identity"
|
|
)
|
|
|
|
func GetUserPermissionCacheKey(user identity.Requester) string {
|
|
return fmt.Sprintf("rbac-permissions-%s", user.GetCacheKey())
|
|
}
|
|
|
|
func GetSearchPermissionCacheKey(user identity.Requester, searchOptions SearchOptions) string {
|
|
key := fmt.Sprintf("rbac-permissions-%s", user.GetCacheKey())
|
|
if searchOptions.Action != "" {
|
|
key += fmt.Sprintf("-%s", searchOptions.Action)
|
|
}
|
|
if searchOptions.Scope != "" {
|
|
key += fmt.Sprintf("-%s", searchOptions.Scope)
|
|
}
|
|
if len(searchOptions.RolePrefixes) > 0 {
|
|
key += "-" + strings.Join(searchOptions.RolePrefixes, "-")
|
|
}
|
|
if searchOptions.ActionPrefix != "" {
|
|
key += fmt.Sprintf("-%s", searchOptions.ActionPrefix)
|
|
}
|
|
return key
|
|
}
|
|
|
|
func GetUserDirectPermissionCacheKey(user identity.Requester) string {
|
|
return fmt.Sprintf("rbac-permissions-direct-%s", user.GetCacheKey())
|
|
}
|
|
|
|
func GetBasicRolePermissionCacheKey(role string, orgID int64) string {
|
|
roleKey := strings.Replace(role, " ", "_", -1)
|
|
roleKey = strings.ToLower(roleKey)
|
|
return fmt.Sprintf("rbac-permissions-basic-role-%d-%s", orgID, roleKey)
|
|
}
|
|
|
|
func GetTeamPermissionCacheKey(teamID int64, orgID int64) string {
|
|
return fmt.Sprintf("rbac-permissions-team-%d-%d", orgID, teamID)
|
|
}
|