RBAC: Change annotation filter to use dashboard based annotation scopes (#78635)

change annotation filter to use dash based annotation scopes
This commit is contained in:
Ieva
2023-11-29 10:34:44 +00:00
committed by GitHub
parent ff7dd17c56
commit 791881f910
7 changed files with 130 additions and 66 deletions

View File

@@ -75,6 +75,8 @@ func NewAccessControlDashboardPermissionFilter(user identity.Requester, permissi
accesscontrol.ActionAlertingRuleCreate,
)
}
} else if queryType == searchstore.TypeAnnotation {
dashboardActions = append(dashboardActions, accesscontrol.ActionAnnotationsRead)
} else {
folderActions = append(folderActions, dashboards.ActionFoldersRead)
dashboardActions = append(dashboardActions, dashboards.ActionDashboardsRead)

View File

@@ -13,6 +13,7 @@ const (
TypeFolder = "dash-folder"
TypeDashboard = "dash-db"
TypeAlertFolder = "dash-folder-alerting"
TypeAnnotation = "dash-annotation"
)
type TypeFilter struct {