grafana/pkg/services/accesscontrol
Gabriel MABILLE 0ee0a0b7a0
AccessControl: FGAC permissions for orgs endpoint on frontend (#41050)
* AccessControl: FGAC permissions for orgs endpoint on frontend

Protect org update endpoints

add or refactor missing right messages

cover org page

* removing scopes from orgs

* Perform permission control with global org

* Perform the error handling in case of 403

* Simplify frontend code by requiring read access for sure

* Remove roles I added to decrease the number of changes

* Remove the check for server admin to reduce the number of changes

* change error message

* Cleaning todos

* Remove unecessary changes

* Fix tests

* Update test snapshot

* Update pkg/api/roles.go

Co-authored-by: Ursula Kallio <73951760+osg-grafana@users.noreply.github.com>

* Update public/app/features/admin/AdminEditOrgPage.tsx

Co-authored-by: Ursula Kallio <73951760+osg-grafana@users.noreply.github.com>

* Format AdminEditOrgPage for linting

* Update public/app/features/admin/AdminEditOrgPage.tsx

Co-authored-by: Vardan Torosyan <vardants@gmail.com>

* Update public/app/features/admin/AdminEditOrgPage.tsx

Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com>

* Update public/app/features/admin/AdminListOrgsPage.tsx

Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com>

* Commit suggestions

* Commit suggestion canRead canWrite

* fix typo

Co-authored-by: Ursula Kallio <73951760+osg-grafana@users.noreply.github.com>
Co-authored-by: Vardan Torosyan <vardants@gmail.com>
Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com>
2021-11-18 14:10:38 +01:00
..
database Access Control: Move part of access control database (#40483) 2021-11-11 14:02:53 +01:00
middleware AccessControl: Remove scopes from orgs endpoints (#41709) 2021-11-17 10:12:28 +01:00
mock Accesscontrol: Add additional API keys to service account, move cloneserviceaccount to sqlstore (#41189) 2021-11-11 10:42:21 +00:00
ossaccesscontrol AccessControl: Remove scopes from orgs endpoints (#41709) 2021-11-17 10:12:28 +01:00
accesscontrol.go AccessControl: FGAC permissions for orgs endpoint on frontend (#41050) 2021-11-18 14:10:38 +01:00
errors.go Revert "Revert "AccessControl: Implement a way to register fixed roles (#35641)" (#37397)" (#37535) 2021-08-04 14:44:37 +02:00
evaluator_test.go AccessControl: Extend scope parameters with extra params from context (#39722) 2021-10-06 13:15:09 +02:00
evaluator.go AccessControl: Extend scope parameters with extra params from context (#39722) 2021-10-06 13:15:09 +02:00
models.go Access Control: adding group field to roles (#41465) 2021-11-12 10:42:47 +00:00
resource_manager.go Access Control: Move part of access control database (#40483) 2021-11-11 14:02:53 +01:00
roles_test.go Access Control: Rename fixed roles (#41288) 2021-11-17 15:40:39 +01:00
roles.go Access control: add roles to fixed groups (#41673) 2021-11-18 09:16:18 +00:00
scope_test.go AccessControl: tidy scope resolution (#40677) 2021-10-20 17:11:22 +02:00
scope.go AccessControl: Remove scopes from orgs endpoints (#41709) 2021-11-17 10:12:28 +01:00