grafana/pkg/services/ngalert/accesscontrol
Yuri Tseretyan b9abb8cabb
Alerting: Update provisioning API to support regular permissions (#77007)
* allow users with regular actions access provisioning API paths
* update methods that read rules
skip new authorization logic if user CanReadAllRules to avoid performance impact on file-provisioning
update all methods to accept identity.Requester that contains all permissions and is required by access control.

* create deltas for single rul e 

* update modify methods
skip new authorization logic if user CanWriteAllRules to avoid performance impact on file-provisioning
update all methods to accept identity.Requester that contains all permissions and is required by access control.

* implement RuleAccessControlService in provisioning

* update file provisioning user to have all permissions to bypass authz

* update provisioning API to return errutil errors correctly

---------

Co-authored-by: Alexander Weaver <weaver.alex.d@gmail.com>
2024-03-22 15:37:10 -04:00
..
fakes Alerting: Update provisioning API to support regular permissions (#77007) 2024-03-22 15:37:10 -04:00
models.go Alerting: Alerting accesscontrol utilities (#84508) 2024-03-14 14:03:53 -04:00
rules_test.go Alerting: Update rule access control to explicitly check for permissions "alert.rules:read" and "folders:read" (#78289) 2024-03-19 22:20:30 -04:00
rules.go Alerting: Update rule access control to explicitly check for permissions "alert.rules:read" and "folders:read" (#78289) 2024-03-19 22:20:30 -04:00
testing.go Alerting: Extract alerting rules authorization logic to a service (#77006) 2023-11-15 18:54:54 +02:00