Alex Khomenko
62494248e3
Restore dashboards: Add RBAC ( #90270 )
...
* Restore dashboards: Add RBAC
* Add check to navtree
* Prevent non-admins from searching deleted dbs
* Add check to the route
* Cleanup
* Update translations
* Update API permissions
* Correct permissions
* Update warning message
* Update translation
* Return 401 for deleted query without admin role
2024-07-11 13:20:04 +03:00
Josh Hunt
52ea6236d4
E2C: Set up page route so cloud-migrations doesn't 404 ( #89947 )
2024-07-02 17:11:18 +01:00
Laura Benz
34b3dbdbf3
RestoreDashboards: Adjust path ( #89233 )
...
* refactor: change path
* fix: page headline
* refactor: remove condition
2024-06-18 17:24:48 +02:00
Ezequiel Victorero
42d75ac737
Dashboards: Add feature restore dashboards backend ( #83131 )
...
Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>
2024-05-16 14:36:26 -03:00
Ezequiel Victorero
c9c6445554
Chore: Refactor render via http ( #84613 )
2024-05-14 07:24:18 -03:00
Alex Khomenko
44e1bce55a
Feature toggles: Remove dashboardEmbed toggle ( #86587 )
2024-04-19 12:48:08 +02:00
Ieva
036f826b87
AuthZ: Further protect admin endpoints ( #86285 )
...
* only users with Grafana Admin role can grant/revoke Grafana Admin role
* check permissions to user amdin endpoints globally
* allow checking global permissions for service accounts
* use a middleware for checking whether the caller is Grafana Admin
2024-04-16 15:48:12 +01:00
Alexander Zobnin
3127566a20
Access control: Use ResolveIdentity() for authorizing in org ( #85549 )
...
* Access control: Use ResolveIdentity() for authorizing in org
* Fix tests
* Fix middleware tests
* Use ResolveIdentity in HasGlobalAccess() function
* remove makeTmpUser
* Cleanup
* Fix linter errors
* Fix test build
* Remove GetUserPermissionsInOrg()
2024-04-10 12:42:13 +02:00
Karl Persson
ba41954854
Email: trigger email verification flow ( #85587 )
...
* Add email and email_verified to id token if identity is a user
* Add endpoint to trigger email verification for user
* Add function to clear stored id tokens and use it when email verification is completed
2024-04-05 12:05:46 +02:00
Gilles De Mey
8765c48389
Alerting: Remove legacy alerting ( #83671 )
...
Removes legacy alerting, so long and thanks for all the fish! 🐟
---------
Co-authored-by: Matthew Jacobson <matthew.jacobson@grafana.com>
Co-authored-by: Sonia Aguilar <soniaAguilarPeiron@users.noreply.github.com>
Co-authored-by: Armand Grillet <armandgrillet@users.noreply.github.com>
Co-authored-by: William Wernert <rwwiv@users.noreply.github.com>
Co-authored-by: Yuri Tseretyan <yuriy.tseretyan@grafana.com>
2024-03-14 15:36:35 +01:00
Xavi Lacasa
46c26bbd0b
Auth: Fix email verification bypass when using basic authentication ( #82914 )
2024-02-16 18:54:59 +01:00
Karl Persson
9e04fd0fb7
AuthToken: Remove client token rotation feature toggle ( #82886 )
...
* Remove usage of client token rotation flag
* Remove client token rotation feature toggle
2024-02-16 15:03:37 +01:00
Ryan McKinley
ba3ee60711
K8s: Allow more control over the final openapi results ( #81829 )
2024-02-02 14:19:45 -08:00
Misi
5da4021ea0
Auth: Fix routing of SSO setting pages ( #81762 )
...
Fix ac.Parameter
2024-02-02 11:14:22 +01:00
Ryan McKinley
795eb4a8d8
K8s/Snapshots: Add dashboardsnapshot api group ( #77667 )
2024-02-01 22:40:11 -08:00
Michael Mandrus
7464ea4346
Feature Toggles: Switch feature toggle admin page over to k8s API ( #80854 )
...
* add handling for legacy and k8s apis to frontend
* use backend srv directly not redux
* add unit test to make sure the correct apis are being called
* require api server flag
* fix feature toggle name
* ensure both pages work correctly
* make consistent with legacy api
* implement webhook update
* fix unit test
* remove old apis and update
---------
Co-authored-by: Ryan McKinley <ryantxu@gmail.com>
2024-02-01 23:52:02 -05:00
Ryan McKinley
e013cd427c
K8s: Add basic query service ( #80325 )
2024-01-31 20:36:51 +02:00
Misi
4577e61ee7
Auth: Improve /admin/authentication permission checks and include new SSO pages ( #81183 )
...
* Move evalAuthSettings to ssoutils
* Improve permission check for auth page
2024-01-25 11:13:24 +01:00
Marcus Efraimsson
6768c6c059
Chore: Remove public vars in setting package ( #81018 )
...
Removes the public variable setting.SecretKey plus some other ones.
Introduces some new functions for creating setting.Cfg.
2024-01-23 12:36:22 +01:00
Misi
6752a512f3
Auth: Change UI route, add frontend endpoints to api.go ( #80671 )
...
Delete advanced from UI route, fix 404
2024-01-19 11:53:37 +01:00
Matthew Jacobson
c18da48e50
Alerting: Separate overlapping legacy and UA alerting routes ( #76517 )
...
* Separate overlapping legacy and UA alerting routes
api/alert-notifiers, alerting/list, and alerting/notifications existed in both
legacy and UA.
Rename legacy route paths and nav ids to be independent of UA ones.
2024-01-04 18:01:57 -05:00
Torkel Ödegaard
e924627659
Frontend: Reload the browser when backend configuration/assets change ( #79057 )
...
* Detect frontend asset changes
* Update
* merge main
* Frontend: Detect new assets / versions / config changes (#79258 )
* avoid first check
* Updates and add tests
* Update
* Update
* Updated code
* refine
* use context
---------
Co-authored-by: Ryan McKinley <ryantxu@gmail.com>
2024-01-04 08:00:07 +01:00
Agnès Toulet
fdaf6e3f2e
PublicDashboards: Add setting to disable the feature ( #78894 )
...
* Replace feature toggle with configuration setting
* Fix permission alert
* Update documentation
* Add back feature toggle
* revert unwanted commited changes
* fix tests
* run prettier
* Update SharePublicDashboard.test.tsx
* fix linter and frontend tests
* Update api.go
* Apply docs edit from code review
Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com>
* Update index.md
* Update docs/sources/setup-grafana/configure-grafana/feature-toggles/index.md
Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com>
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com>
* add isPublicDashboardsEnabled + test
* fix test
* update ff description in registry
* move isPublicDashboardsEnabled
* revert getConfig() update
---------
Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com>
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>
2023-12-19 11:43:54 +01:00
Will Browne
0b511aaace
Plugins: Add backend check for app page role access ( #78269 )
...
* add backend check for roles
* tidy
* fix tests
* incorporate rbac
* fix linter
* apply PR feedback
* add tests
* fix logic
* add comment
* apply PR feedback
2023-12-18 16:12:46 +01:00
Andres Martinez Gotor
1324186f87
Chore: Evaluate if an app is disabled for API requests ( #79564 )
2023-12-15 16:37:39 +01:00
Todd Treece
529271d7a8
Perf: Disable core kind registry ( #78568 )
...
Co-authored-by: Ryan McKinley <ryantxu@gmail.com>
2023-11-28 09:09:54 +01:00
Jo
0de66a8099
Authz: Remove use of SignedInUser copy for permission evaluation ( #78448 )
...
* remove use of SignedInUserCopies
* add extra safety to not cross assign permissions
unwind circular dependency
dashboardacl->dashboardaccess
fix missing import
* correctly set teams for permissions
* fix missing inits
* nit: check err
* exit early for api keys
2023-11-22 14:20:22 +01:00
Juan Cabanas
9c5daed336
PublicDashboards: Middleware creation ( #77941 )
2023-11-21 17:56:36 -03:00
Gabriel MABILLE
b6b86bb0b3
RBAC: Check plugins:install
globally ( #78438 )
...
* RBAC: Check plugins:install globally
* Add disclamer to the RBACSingleOrganization config option
2023-11-21 15:09:43 +01:00
Ryan McKinley
b8e8d84ef7
Swagger: Show k8s APIs ( #78091 )
2023-11-15 06:42:35 -08:00
Ryan McKinley
f69fd3726b
FeatureToggles: Add context and and an explicit global check ( #78081 )
2023-11-14 12:50:27 -08:00
Ryan McKinley
3509a5abb9
FeatureFlags: Cleanup usage of cfg.IsFeatureToggleEnabled ( #78014 )
2023-11-13 07:55:15 -08:00
Hugo Kiyodi Oshiro
e754c5a6c6
Plugins: Change managed plugins installation call ( #77120 )
2023-11-10 12:28:36 +01:00
Ryan McKinley
35c1ee9686
EntityStore: Remove http access (can use apiserver now) ( #77602 )
2023-11-03 08:14:51 -07:00
Ryan McKinley
45d59cf31b
Dashboards: Remove dummy trim dashboard api ( #77249 )
...
Co-authored-by: nikimanoledaki <niki.manoledaki@grafana.com>
2023-11-02 08:35:14 -07:00
Ryan McKinley
dd773e74f1
K8s: Implement playlist api with k8s client ( #77405 )
2023-10-31 10:26:39 -07:00
Ieva
5c4cece430
Fix: align access to the team page with access to the team tab ( #76868 )
...
align access to the team page with access to the team tab in the navigation bar
2023-10-20 13:51:03 +01:00
João Calisto
9fc0e1566e
Feature Management: Update admin page UI after a successful update ( #76380 )
...
* Feature Management: Update admin page UI after a successful update
* lint
* lint
* refactor
2023-10-13 11:54:34 +01:00
Gabriel MABILLE
420fb56fda
RBAC: Fix plugins pages access-control ( #76321 )
...
* RBAC: Fix plugins pages access-control
* Better comment
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
* Add a small comment on connections/datasources routes
---------
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
2023-10-12 10:46:43 +02:00
Jo
466f8a1f5a
Teams: Move team API to own service ( #76347 )
...
* move team API to its own service
* remove uneeded import
* reshare pref api logic
2023-10-12 10:10:54 +02:00
Ryan McKinley
bbdd1fc3b1
Playlist: Remove unused/deprecated api and unused wrapper ( #75503 )
2023-09-27 15:28:16 +00:00
Carl Bergquist
8d62ed77f0
instrumentation: set slogroup high-fast for more handlers ( #75449 )
...
Signed-off-by: bergquist <carl.bergquist@gmail.com>
2023-09-26 19:11:29 +02:00
Carl Bergquist
e5fbc4a4cd
web: add slo group to request meta ( #74765 )
...
Signed-off-by: bergquist <carl.bergquist@gmail.com>
2023-09-22 11:52:28 +03:00
Carl Bergquist
764478b9e7
Instrumentation: Set auth as owners for more routes ( #75105 )
...
Signed-off-by: bergquist <carl.bergquist@gmail.com>
2023-09-20 10:18:52 +02:00
Torkel Ödegaard
3ee26df41e
PublicDashboards: Variables refactor ( #73476 )
...
Co-authored-by: Juan Cabanas <juan.cabanas@grafana.com>
Co-authored-by: Ezequiel Victorero <ezequiel.victorero@grafana.com>
Co-authored-by: Ryan McKinley <ryantxu@gmail.com>
2023-08-25 13:56:02 -05:00
Carl Bergquist
243b757168
Middleware: Add team metadata to HTTP handlers ( #71010 )
...
Signed-off-by: bergquist <carl.bergquist@gmail.com>
2023-08-16 15:05:19 +02:00
Michael Mandrus
779e0fe311
Feature Toggles: Create API for updating feature toggle state from the feature toggle admin page ( #73022 )
...
* create roles for writing feature toggles
* create update endpoint / handler
* api changes
* add feature toggle validations
* hide toggles based on their state
* make FlagFeatureToggle read only
* add username log
* add username string
* refactor for better readability
* refactor unit tests so we can do more validations
* some skeletoning for the set tests
* write unit tests for updater
* break helper functions out
* update sample ini to match defaults
* add more logic to ReadOnly label
* add user documentation
* fix lint issue
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: J Stickler <julie.stickler@grafana.com>
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: J Stickler <julie.stickler@grafana.com>
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: J Stickler <julie.stickler@grafana.com>
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: J Stickler <julie.stickler@grafana.com>
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: J Stickler <julie.stickler@grafana.com>
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: J Stickler <julie.stickler@grafana.com>
---------
Co-authored-by: IbrahimCSAE <ibrahim.mdev@gmail.com>
Co-authored-by: J Stickler <julie.stickler@grafana.com>
2023-08-09 11:32:28 -04:00
Ibrahim
0d48ac2419
Feat: Feature toggle admin page frontend interface ( #72164 )
...
* feature toggles admin page proto
* feature toggle admin page proto
* keep phase 1 code only
* latest update with api
* fix
* fix
* add correct premissions in admin.go
* move behind toggle
* Use InteractiveTable
* guard behind feature toggle
* use RTK
* route in api.go
* fixes
2023-08-03 14:17:00 -04:00
João Calisto
4ba83173ea
Feature toggles management: Define get feature toggles api ( #72106 )
...
* Feature Toggle Management: Define get feature toggles api
* lint
2023-07-24 16:12:59 -04:00
Jo
9b22342b91
Auth: Move LDAP debug to Authentication menu ( #71285 )
...
* move LDAP page to Authentication
* tweak Auth menu showing permissions
2023-07-12 18:15:02 +02:00