grafana/pkg/services/guardian
Ieva cfa1a2c55f
RBAC: Split non-empty scopes into kind, attribute and identifier fields for better search performance (#71933)
* add a feature toggle

* add the fields for attribute, kind and identifier to permission

Co-authored-by: Kalle Persson <kalle.persson@grafana.com>

* set the new fields when new permissions are stored

* add migrations

Co-authored-by: Kalle Persson <kalle.persson@grafana.com>

* remove comments

* Update pkg/services/accesscontrol/migrator/migrator.go

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>

* feedback: put column migrations behind the feature toggle, added an index, changed how wildcard scopes are split

* PR feedback: add a comment and revert an accidentally changed file

* PR feedback: handle the case with : in resource identifier

* switch from checking feature toggle through cfg to checking it through featuremgmt

* don't put the column migrations behind a feature toggle after all - this breaks permission queries from db

---------

Co-authored-by: Kalle Persson <kalle.persson@grafana.com>
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>
2023-07-21 15:23:01 +01:00
..
accesscontrol_guardian_test.go RBAC: Split non-empty scopes into kind, attribute and identifier fields for better search performance (#71933) 2023-07-21 15:23:01 +01:00
accesscontrol_guardian.go Cfg: Move ViewersCanEdit into cfg (#64876) 2023-03-16 10:54:01 +01:00
guardian_test.go Cfg: Move ViewersCanEdit into cfg (#64876) 2023-03-16 10:54:01 +01:00
guardian_util_test.go Cfg: Move ViewersCanEdit into cfg (#64876) 2023-03-16 10:54:01 +01:00
guardian.go Cfg: Move ViewersCanEdit into cfg (#64876) 2023-03-16 10:54:01 +01:00
provider.go Cfg: Move ViewersCanEdit into cfg (#64876) 2023-03-16 10:54:01 +01:00