IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2026-07-29 15:59:50 -05:00
Code Issues Packages Projects Releases Wiki Activity
48,927 Commits 1,119 Branches 715 Tags
dbbbfa282ded4c751ff1792a85cab885afe8d0f4
Commit Graph
57 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Vardan Torosyan 63cd5a5625 Chore: Cleanup namespace and ID resolution (#79360) 
* Chore: Cleanup namespace ID resolution

* Check for negative userID when relevant

* Reuse existing function for parsing ID as int

* Fix imports
 2023-12-21 20:42:05 +01:00
Vardan Torosyan a35146f7ed Service account: Update last used timestamp when token is used (#79254) 2023-12-08 16:53:11 +01:00
Vardan Torosyan edc197ef1d Strip out auth token from shared URL when sharing a dashboard (#79262) 2023-12-08 16:07:29 +01:00
Vardan Torosyan d624a5d490 Chore: Replace grafana-authnz-team with identity-access-team as code owners (#77609) 
* Chore: Replace grafana-authnz-team with identity-access-team as code owner

* Chore: Replace grafana-authnz-team with identity-access-team as code owner

* Fix the failing test
 2023-11-03 13:20:39 +01:00
Vardan Torosyan e3288834b3 Docs: Add a section about using multiple auth providers in Grafana (#74710) 
* Docs: Add a section about using multiple auth providers in Grafana

* Prettier and feedback
 2023-09-12 12:09:47 +02:00
Vardan TorosyanIevaJoChristopher Moyer
 		87b127e073 Add and document option for enabling email lookup (#913) 
* Docs: Document option for enabling email lookup

* Add the new config in the config files

* Apply suggestions from code review

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>

* Don't capitalize identity providers

* Apply suggestions from code review

Co-authored-by: Jo <joao.guerreiro@grafana.com>

* Apply suggestions from code review

Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>

---------

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
Co-authored-by: Jo <joao.guerreiro@grafana.com>
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>
 2023-06-23 09:08:04 +02:00
Vardan TorosyanandJack Baldry 0e5e5175b1 Docs: Bring back the alias for external group sync HTTP API page (#69434) 
* Docs: Bring back the alias for external group sync HTTP API page

* Update docs/sources/developers/http_api/team_sync.md

Co-authored-by: Jack Baldry <jack.baldry@grafana.com>

---------

Co-authored-by: Jack Baldry <jack.baldry@grafana.com>
 2023-06-02 15:01:33 +02:00
Vardan Torosyan 8235f774aa Docs: Rename External Group Sync references to Team Sync (#69395) 2023-06-01 10:48:32 -05:00
Vardan Torosyan 6aab5e35d5 Docs: Clarify precedence of Grafana settings (#68020) 2023-05-09 11:03:09 +02:00
Vardan Torosyan e5b12e23b1 Docs: Add a note about disabling SAML UI (#67877) 2023-05-05 11:54:39 +02:00
Vardan Torosyan f70f31744b Require access to all settings to read Grafana Settings (#66992) 
* Require access to all settings to read Grafana Settings

* Handle PR comments
 2023-04-20 19:58:50 +03:00
Vardan Torosyan ce0f1803c0 Require access to all settings for the nav item (#66990) 2023-04-20 16:37:50 +00:00
Vardan Torosyan 694b48660b Docs: Fix a type in support bundles (#66481) 2023-04-13 17:47:15 +02:00
Vardan Torosyan 962bf8a906 RBAC: Remove the flag from the config which states that you can disable RBAC (#53730) 2022-08-15 14:22:04 +02:00
Vardan TorosyanandGarrett Guillotte 532741a8fe RBAC: Update the docs homepage to mention that RBAC is only enterprise (#52890) 
* RBAC: Update the docs homepage to mention that RBAC is only enterprise

* Don't mention that there is anything to enable for provisioning RBAC

* Add GE notices to child RBAC pages

* Extend the RBAC availibility note to Cloud Advanced

Co-authored-by: Garrett Guillotte <garrett.guillotte@grafana.com>
 2022-07-28 05:32:11 -04:00
Vardan Torosyan 47c9d461b3 Service accounts: Document service account managed permissions (#52628) 2022-07-22 10:35:14 +02:00
Vardan Torosyan 18867d6d78 Service account: Ensure that you can revert only service accounts which you can access (#52626) 
* Service account: Ensure that you can revert only service accounts which you can access

* Remove prettier messup with docs

* Remove prettier messup with docs

* Prettier run
 2022-07-22 10:35:01 +02:00
Vardan Torosyan 5d05d26e12 Service account: Redirect to the edit page after creation (#52623) 2022-07-22 09:54:24 +02:00
Vardan Torosyan 7251b8524f Service accounts: Update docs to mention about reverting token to API key (#52608) 
* Service accounts: Update docs to mention about reverting token to API key

* Update docs/sources/administration/api-keys/_index.md
 2022-07-21 18:56:41 +02:00
Vardan Torosyan f571c46495 Service accounts: Add a confirm modal for migration actions (#52604) 
* Service accounts: Add a confirm modal for migration actions

* Handle the error case when migrating fails, reload page afterwards so that the tab disappears
 2022-07-21 18:56:20 +02:00
Vardan TorosyanandIeva 73f4d7ac05 Service accounts: Update documentation with new changes (#52015) 
* Service accounts: Update documentation with new changes

* Apply suggestions from code review

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>

* Add sections about migration, handle comments

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
 2022-07-11 21:32:07 +01:00
Vardan Torosyan 32c2b62dc7 Service accounts: Remove feature toggle check on API keys page (#52048) 
* Service accounts: Remove feature toggle check on API keys page

* Increase a11y threshold
 2022-07-11 16:24:10 +01:00
Vardan Torosyan 5eaba5b5b2 Service account: Update service accounts creation (#51848) 2022-07-07 17:32:56 +01:00
Vardan Torosyan f1661166b2 Service accounts: Grafana service accounts are enabled by default (#51402) 
* Remove feature flag for service accounts

* Fix failing tests and remove remaining usage

* Fix failing tests and remove remaining usage
 2022-06-27 10:22:49 +02:00
Vardan Torosyan 7f0c33d8a4 Update the hint text in service accounts to point to docs (#51400) 
* Update the hint text in service accounts to point to docs

* Update ServiceAccountsListPage.tsx
 2022-06-27 09:18:16 +02:00
Vardan Torosyan 3273588cc0 Configure Grafana AuthNZ labels to add to the AuthNZ project (#51120) 2022-06-20 15:52:56 +02:00
Vardan Torosyan 93f9792199 Quick Ugly Fix for Oauth not to make web_hack.go panic (#49653) 2022-05-26 14:34:04 +02:00
Vardan Torosyan 69e2ab3d0f Codeowners update: Map auth services to the Grafana AuthNZ team (#49421) 2022-05-24 08:44:16 +02:00
Vardan Torosyan 36663c093c Rename built-in roles to basic roles in the role picker (#49258) 2022-05-19 17:58:18 +02:00
Vardan Torosyan a0553de8dd Rename FGAC to RBAC in the codebase (#48051) 2022-04-21 14:31:02 +02:00
Vardan Torosyan cbd2d09d70 Update API Keys UI to adjust based on users permissions (#47802) 
* Update API Keys UI to adjust based on users permissions

Since API Keys support now RBAC we need to ensure that UI
is adjusted based on the user permissions.

* Applying PR suggestions
 2022-04-20 09:45:45 +02:00
Vardan Torosyan 782ec05d8c Create fixed roles for reading API Keys and service accounts and fix listing of service account tokens (#47767) 
* Create fixed roles for reading API Keys and service accounts

* Handle PR comments and fix the listing of token
 2022-04-14 15:09:55 +02:00
Vardan Torosyan 463f00b93f Reload permissions cache when adding a datasource (#47658) 2022-04-13 11:58:18 +02:00
Vardan Torosyan 8853fe5b91 Add Grafana AuthNZ team as a code owner (#47362) 2022-04-06 15:40:27 +02:00
Vardan Torosyan b38d3f339a Documentation for granting and revoking access for teams. (#44863) 2022-02-04 13:17:25 +01:00
Vardan Torosyan f38f10416a Revert fixed roles and service accounts (#44778) 
* Revert fixed roles and service accounts

* Leave the fixed role for service accounts
 2022-02-03 09:59:26 +01:00
Vardan Torosyan 2053049c40 Remove service accounts from public documentation as it's not being released yet (#44658) 2022-01-31 16:37:51 +01:00
Vardan TorosyanUrsula KallioMitch Seaman
 		18b5e40d5a Docs: Update the coverage of fine-grained access control (#41398) 
* Docs: Update the coverage of fine-grained access control

* Apply suggestions from code review

Co-authored-by: Ursula Kallio <73951760+osg-grafana@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Mitch Seaman <mjseaman@users.noreply.github.com>

Co-authored-by: Ursula Kallio <73951760+osg-grafana@users.noreply.github.com>
Co-authored-by: Mitch Seaman <mjseaman@users.noreply.github.com>
 2021-11-24 21:32:07 +01:00
Vardan TorosyanandUrsula Kallio 8537b36be2 Access control: Document new permissions restricting access for reloading provisioning configuration (#38906) 
* Access control: Document new permissions restricting access for reloading provisioning configuration

* Apply suggestions from code review

Co-authored-by: Ursula Kallio <73951760+osg-grafana@users.noreply.github.com>

Co-authored-by: Ursula Kallio <73951760+osg-grafana@users.noreply.github.com>
 2021-09-15 17:58:20 +02:00
Vardan Torosyan 53072bcad1 Update Settings Update documentation with the information about fine-grained access control (#37300) 2021-07-30 13:04:13 +02:00
Vardan Torosyan 2c810506a5 Add fine-grained access control information to the features which now support it (#37303) 
* Add fine-grained access control information to the features which now support it

* Mention the new permissions in Explore docs
 2021-07-29 10:38:46 +02:00
Vardan Torosyan 140bb4cc56 Access control docs: Add a note indicating that Explore can be managed by fine-grained access control (#36703) 
* Access control: Add FGAC permissions to Admins for Explore access

* Remove unnecessary change
 2021-07-20 09:03:28 +02:00
Vardan Torosyan 676ddac088 Docs: Document fine-grained access control (#33563) 2021-05-20 09:53:34 -07:00
Vardan Torosyan 99acbdd3c5 Docs: Update HTTP API index page to make clear that GE API includes everything OSS (#34269) 2021-05-20 12:38:05 +02:00
Vardan Torosyan 1e566e7783 Access control: Add phone-home metrics to check if fine-grained access control is enabled or not (#34107) 
* Access control: Add phone-home metrics to check if fine-grained access control is enabled or not

* Apply suggestions from code review
 2021-05-17 16:33:38 +02:00
Vardan Torosyan 1d15686bdf Access control: Add a role for provisioning admins (#33787) 2021-05-10 11:46:42 +02:00
Vardan Torosyan 2a98ac1ab4 Access control: Fix scopes in the API routes (#33750) 2021-05-05 16:52:21 +02:00
Vardan Torosyan 5bf6d7dad8 Access control: Update evaluator to authorize when at least one of the scopes is a match (#33393) 2021-04-27 18:22:18 +02:00
Vardan Torosyan bf83fb80b7 Access control: Combine permissions through predefined roles (#33275) 
* Access control: Combine permissions through predefined roles

When certain permission is required for built-in role, instead of adding those permissions to the existing predefined roles, we need to have granular predefined roles with those permissions.

* Better copy...

* Adding and fixing tests

* Remove duplicated permission
 2021-04-23 15:44:42 +02:00
Vardan TorosyanandEmil Tullstedt 9f82eac833 Access control: Add access control based permissions to admins/users (#32409) 
Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com>
 2021-04-14 16:31:27 +02:00
Vardan Torosyan e53b5afcd2 Licensing docs: Add docs about usage billing option (#31267) 2021-03-11 18:49:46 +01:00
Vardan Torosyan 12a7b342b9 Licensing Docs: Adding license restrictions docs (#30216) 2021-01-26 17:19:57 +01:00
Vardan Torosyan 1d399b89ea Usage Stats: Remove unused method for getting user stats (#30074) 
* Usage Stats: Remove unused method for getting user stats

This was used in enterprise codebase, but is not longer in use, thus can be safely removed.

* Force refresh user stats in tests
 2021-01-26 14:13:25 +01:00
Vardan Torosyan 0d8d96bdaa Docs: Add metadata to activating licensing page (#30140) 
* Docs: Add metadata to activating licensing page

* Adding enterprise lable
 2021-01-08 15:35:50 +01:00
Vardan Torosyan 7ff37bc6bb Usage Stats: Calculate concurrent users as a histogram (#30006) 
Usage Stats: Calculate concurrent users as a histogram

Metric will help to understand if users are sharing their credentials or using one account for concurrent sessions. This will help to make more informed decisions when enforcing any license limitations on credentials usage.
 2021-01-06 16:57:31 +01:00
Vardan Torosyan de22374751 Usage Stats: Introduce an interface for usage stats service (#29882) 
Adding an interface type for usage stats service allows us to not depend on the implementation outside of the package, for example when testing we can easily mock the service
 2020-12-16 16:12:02 +01:00
Vardan Torosyan fac34f65c9 Usage Stats: Allow to add additional metrics to the stats (#29774) 
The change allows to add external, additional metrics which will be reported with the rest of hardcoded metrics, allowing to add metrics without a need to change the service itself.
 2020-12-16 12:44:33 +01:00