mirror of
https://github.com/grafana/grafana.git
synced 2025-02-25 18:55:37 -06:00
Reduced OAuth scope to read_write
This commit is contained in:
committed by
bergquist
parent
fcdf282090
commit
7e3c9fcc1c
@@ -683,6 +683,8 @@ basic auth password
|
|||||||
Path to JSON key file associated with a Google service account to authenticate and authorize.
|
Path to JSON key file associated with a Google service account to authenticate and authorize.
|
||||||
Service Account keys can be created and downloaded from https://console.developers.google.com/permissions/serviceaccounts.
|
Service Account keys can be created and downloaded from https://console.developers.google.com/permissions/serviceaccounts.
|
||||||
|
|
||||||
|
Service Account should have "Storage Object Writer" role.
|
||||||
|
|
||||||
### bucket name
|
### bucket name
|
||||||
Bucket Name on Google Cloud Storage.
|
Bucket Name on Google Cloud Storage.
|
||||||
|
|
||||||
|
|||||||
@@ -39,7 +39,7 @@ func (u *GCSUploader) Upload(imageDiskPath string) (string, error) {
|
|||||||
|
|
||||||
log.Debug("Creating JWT conf")
|
log.Debug("Creating JWT conf")
|
||||||
|
|
||||||
conf, err := google.JWTConfigFromJSON(data, "https://www.googleapis.com/auth/devstorage.full_control")
|
conf, err := google.JWTConfigFromJSON(data, "https://www.googleapis.com/auth/devstorage.read_write")
|
||||||
if err != nil {
|
if err != nil {
|
||||||
return "", err
|
return "", err
|
||||||
}
|
}
|
||||||
Reference in New Issue
Block a user