From 9c6feac6cc3d2a4ea09a54b9f1bb5934c04ca437 Mon Sep 17 00:00:00 2001 From: Gabriel MABILLE Date: Mon, 24 Apr 2023 09:02:42 +0200 Subject: [PATCH] FIX: Make dashboards navlink accessible with only folders permissions (#67049) --- pkg/services/navtree/navtreeimpl/navtree.go | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pkg/services/navtree/navtreeimpl/navtree.go b/pkg/services/navtree/navtreeimpl/navtree.go index 2c6c18c8699..b8544cffc3a 100644 --- a/pkg/services/navtree/navtreeimpl/navtree.go +++ b/pkg/services/navtree/navtreeimpl/navtree.go @@ -95,7 +95,10 @@ func (s *ServiceImpl) GetNavTree(c *contextmodel.ReqContext, hasEditPerm bool, p }) } - if c.IsPublicDashboardView || hasAccess(ac.ReqSignedIn, ac.EvalAny(ac.EvalPermission(dashboards.ActionDashboardsRead), ac.EvalPermission(dashboards.ActionDashboardsCreate))) { + if c.IsPublicDashboardView || hasAccess(ac.ReqSignedIn, ac.EvalAny( + ac.EvalPermission(dashboards.ActionFoldersRead), ac.EvalPermission(dashboards.ActionFoldersCreate), + ac.EvalPermission(dashboards.ActionDashboardsRead), ac.EvalPermission(dashboards.ActionDashboardsCreate)), + ) { dashboardChildLinks := s.buildDashboardNavLinks(c, hasEditPerm) dashboardLink := &navtree.NavLink{