Require alert.notifications:write permissions to test receivers and templates (#865)

# Conflicts:
#	pkg/services/ngalert/api/authorization.go
This commit is contained in:
dsotirakis 2023-05-25 09:51:19 +03:00 committed by Horst Gutmann
parent 49c940de23
commit f9c310dbaf
No known key found for this signature in database
GPG Key ID: 6F203F0D220F8E98

View File

@ -152,9 +152,10 @@ func (api *API) authorize(method, path string) web.Handler {
case http.MethodGet + "/api/alertmanager/grafana/config/api/v1/receivers":
eval = ac.EvalPermission(ac.ActionAlertingNotificationsRead)
case http.MethodPost + "/api/alertmanager/grafana/config/api/v1/receivers/test":
eval = ac.EvalPermission(ac.ActionAlertingNotificationsRead)
eval = ac.EvalPermission(ac.ActionAlertingNotificationsWrite)
case http.MethodPost + "/api/alertmanager/grafana/config/api/v1/templates/test":
eval = ac.EvalPermission(ac.ActionAlertingNotificationsRead)
fallback = middleware.ReqEditorRole
eval = ac.EvalPermission(ac.ActionAlertingNotificationsWrite)
// External Alertmanager Paths
case http.MethodDelete + "/api/alertmanager/{DatasourceUID}/config/api/v1/alerts":