grafana/pkg
William Wernert 053a806ab1
Alerting: Validate namespace when updating rules through the provisioning API (#94643)
* Also validate folder on provisioning update

* Move folder check before auth check

When checking for the existence of a folder we go through the folder
service which requires auth. Doing so prevents an unprivileged user from
accessing information about whether a particular folder exists or not.
2024-10-18 18:21:26 +03:00
..
aggregator Chore: Update SDK to v0.255.0 (#94894) 2024-10-18 10:42:32 +02:00
api Frontend Sandbox: Create a plugin sandbox enable registry. Use enable list instead of disable list (#94809) 2024-10-17 16:56:50 +02:00
apimachinery Auth: Update authlib (#94947) 2024-10-18 13:36:21 +02:00
apis RBAC: Add legacy authorization checks to teams (#94524) 2024-10-10 16:47:31 +02:00
apiserver Auth: Update authlib (#94947) 2024-10-18 13:36:21 +02:00
build Tempo: Add support for /api/v2/traces/ and partial traces in Trace View (#94267) 2024-10-18 15:10:22 +03:00
bus Tracing: Standardize on otel tracing (#75528) 2023-10-03 14:54:20 +02:00
cmd Zanzana: periodic sync of team members (#94752) 2024-10-17 15:28:33 +02:00
codegen chore(deps): Upgrade openapi dep, remove replace directive (#90609) 2024-07-18 14:42:18 -04:00
components Chore: Bump google.golang.org/grpc to 1.64.0 (#88219) 2024-05-27 12:44:39 +02:00
events Alerting: update rule versions on folder move (#88376) 2024-08-13 12:26:26 +02:00
expr ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability (#94942) 2024-10-18 11:28:26 +01:00
extensions K8s: Move standalone apiserver CLI to enterprise (#93799) 2024-09-27 09:04:35 +03:00
generated Alerting: Notifications Templates API (#91349) 2024-09-25 09:31:57 -04:00
ifaces/gcsifaces Chore: Upgrade Go to 1.19.1 (#54902) 2022-09-12 12:03:49 +02:00
infra Plugins: Auto instrumentation improvements (#94193) 2024-10-15 14:02:34 +02:00
kinds Dashboard Scene: Fix snapshots not displaying variables values (#88967) 2024-08-20 17:05:12 +02:00
login/social Auth: Introduce authn.SSOClientConfig to get client config from SSOSettings service (#94618) 2024-10-16 16:27:44 +02:00
middleware Auth: Fix redirection when auto_login is enabled (#94311) 2024-10-07 14:59:00 +02:00
mocks/mock_gcsifaces Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
models Auth: Attach external session info to Grafana session (#93849) 2024-10-08 11:03:29 +02:00
modules Zanzana: Initial work to run openFGA as embedded or standalone service (#89211) 2024-06-18 10:04:18 +02:00
plugins Plugins: Auto instrumentation improvements (#94193) 2024-10-15 14:02:34 +02:00
promlib Tempo: Add support for /api/v2/traces/ and partial traces in Trace View (#94267) 2024-10-18 15:10:22 +03:00
registry Auth: Update authlib (#94947) 2024-10-18 13:36:21 +02:00
semconv Chore: Update SDK to v0.255.0 (#94894) 2024-10-18 10:42:32 +02:00
server Storage: Add blob storage interfaces (#90932) 2024-10-17 12:18:29 +02:00
services Alerting: Validate namespace when updating rules through the provisioning API (#94643) 2024-10-18 18:21:26 +03:00
setting Frontend Monitoring: Set correct default value in Go file (#94976) 2024-10-18 17:52:46 +03:00
storage Unistore Chore: Add database-level observability (#92266) 2024-10-18 00:32:08 -03:00
tests Storage: Add blob storage interfaces (#90932) 2024-10-17 12:18:29 +02:00
tsdb Tempo: Add support for /api/v2/traces/ and partial traces in Trace View (#94267) 2024-10-18 15:10:22 +03:00
util Chore: Update SDK to v0.255.0 (#94894) 2024-10-18 10:42:32 +02:00
web feat: add QueryIntWithDefault to web context (#93130) 2024-09-10 09:04:49 -05:00
README.md Chore: Move all backend contribution documents to a single directory (#61140) 2023-01-11 11:16:52 +01:00
ruleguard.rules.go Chore: update all +build statements (#38782) 2021-09-01 17:38:56 +03:00

This directory contains the code for the Grafana backend.

The contributor documentation for Grafana's backend is in /contribute/backend/README.md.