grafana/pkg/services/accesscontrol
Ieva 602d62ebcc
Access control: FGAC for team sync endpoints (#44673)
* add actions for team group sync

* extend the hook to allow specifying whether the user is external

* move user struct to type package

* interface for permission service to allow mocking it

* reuse existing permissions

* test fix

* refactor

* linting
2022-02-03 15:27:05 +00:00
..
database Access control: FGAC for team sync endpoints (#44673) 2022-02-03 15:27:05 +00:00
middleware Remove bus from quota, preferences, plugins, user_token (#44762) 2022-02-03 09:20:20 +01:00
mock AccessControl: Resolve attribute based scopes to id based scopes (#40742) 2022-01-18 17:34:35 +01:00
ossaccesscontrol AccessControl: Read team permissions from db (#44727) 2022-02-01 18:35:31 +01:00
resourcepermissions Access control: FGAC for team sync endpoints (#44673) 2022-02-03 15:27:05 +00:00
resourceservices Access control: FGAC for team sync endpoints (#44673) 2022-02-03 15:27:05 +00:00
accesscontrol_bench_test.go AccessControl: Remove unused error from GetResourcesMetadata (#43710) 2022-01-05 17:24:14 +01:00
accesscontrol_test.go AccessControl: Remove unused error from GetResourcesMetadata (#43710) 2022-01-05 17:24:14 +01:00
accesscontrol.go Access control: FGAC for team sync endpoints (#44673) 2022-02-03 15:27:05 +00:00
errors.go AccessControl: Resolve attribute based scopes to id based scopes (#40742) 2022-01-18 17:34:35 +01:00
evaluator_test.go AccessControl: Resolve attribute based scopes to id based scopes (#40742) 2022-01-18 17:34:35 +01:00
evaluator.go AccessControl: improve denied message (#44551) 2022-01-28 12:17:24 +01:00
filter_bench_test.go Access control: Rewrite access control SQL filter (#44488) 2022-01-27 13:06:08 +01:00
filter_test.go handle case when scope is wildcard (#44654) 2022-01-31 14:44:20 +01:00
filter.go handle case when scope is wildcard (#44654) 2022-01-31 14:44:20 +01:00
models.go Access control: Load permissions from memory and database (#42080) 2022-01-28 16:11:18 +01:00
roles_test.go Access Control: Rename fixed roles (#41288) 2021-11-17 15:40:39 +01:00
roles.go Add viewer grant to fixed:datasources:reader if viewers_can_edit is set to true (#44657) 2022-01-31 16:33:41 +01:00
scope_test.go AccessControl: Resolve attribute based scopes to id based scopes (#40742) 2022-01-18 17:34:35 +01:00
scope.go AccessControl: Resolve attribute based scopes to id based scopes (#40742) 2022-01-18 17:34:35 +01:00