Auth: Add None role to Viewer case (#96624)

Add None role to Viewer case
This commit is contained in:
linoman 2024-11-19 11:29:58 +01:00 committed by GitHub
parent 3fa8df6b62
commit 8b7100a9aa
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -37,15 +37,13 @@ func (auth orgRoleAuthorizer) Authorize(ctx context.Context, a authorizer.Attrib
default:
return authorizer.DecisionDeny, errorMessageForGrafanaOrgRole(orgRole, a), nil
}
case org.RoleViewer:
case org.RoleViewer, org.RoleNone:
switch a.GetVerb() {
case "get", "list", "watch":
return authorizer.DecisionAllow, "", nil
default:
return authorizer.DecisionDeny, errorMessageForGrafanaOrgRole(orgRole, a), nil
}
case org.RoleNone:
return authorizer.DecisionDeny, errorMessageForGrafanaOrgRole(orgRole, a), nil
}
return authorizer.DecisionDeny, "", nil
}