mirror of
https://github.com/grafana/grafana.git
synced 2025-02-12 00:25:46 -06:00
4982ca3b1d
* Add actions and scopes * add resource service for dashboard and folder * Add dashboard guardian with fgac permission evaluation * Add CanDelete function to guardian interface * Add CanDelete property to folder and dashboard dto and set values * change to correct function name * Add accesscontrol to folder endpoints * add access control to dashboard endpoints * check access for nav links * Add fixed roles for dashboard and folders * use correct package * add hack to override guardian Constructor if accesscontrol is enabled * Add services * Add function to handle api backward compatability * Add permissionServices to HttpServer * Set permission when new dashboard is created * Add default permission when creating new dashboard * Set default permission when creating folder and dashboard * Add access control filter for dashboard search * Add to accept list * Add accesscontrol to dashboardimport * Disable access control in tests * Add check to see if user is allow to create a dashboard * Use SetPermissions * Use function to set several permissions at once * remove permissions for folder and dashboard on delete * update required permission * set permission for provisioning * Add CanCreate to dashboard guardian and set correct permisisons for provisioning * Dont set admin on folder / dashboard creation * Add dashboard and folder permission migrations * Add tests for CanCreate * Add roles and update descriptions * Solve uid to id for dashboard and folder permissions * Add folder and dashboard actions to permission filter * Handle viewer_can_edit flag * set folder and dashboard permissions services * Add dashboard permissions when importing a new dashboard * Set access control permissions on provisioning * Pass feature flags and only set permissions if access control is enabled * only add default permissions for folders and dashboards without folders * Batch create permissions in migrations * Remove `dashboards:edit` action * Remove unused function from interface * Update pkg/services/guardian/accesscontrol_guardian_test.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
93 lines
4.4 KiB
Go
93 lines
4.4 KiB
Go
//go:build wireinject && oss
|
|
// +build wireinject,oss
|
|
|
|
package server
|
|
|
|
import (
|
|
"github.com/google/wire"
|
|
"github.com/grafana/grafana/pkg/models"
|
|
"github.com/grafana/grafana/pkg/plugins"
|
|
"github.com/grafana/grafana/pkg/plugins/backendplugin/provider"
|
|
"github.com/grafana/grafana/pkg/plugins/manager/signature"
|
|
"github.com/grafana/grafana/pkg/registry"
|
|
"github.com/grafana/grafana/pkg/server/backgroundsvcs"
|
|
"github.com/grafana/grafana/pkg/services/accesscontrol"
|
|
acdb "github.com/grafana/grafana/pkg/services/accesscontrol/database"
|
|
"github.com/grafana/grafana/pkg/services/accesscontrol/ossaccesscontrol"
|
|
"github.com/grafana/grafana/pkg/services/accesscontrol/resourcepermissions"
|
|
"github.com/grafana/grafana/pkg/services/auth"
|
|
"github.com/grafana/grafana/pkg/services/datasources"
|
|
"github.com/grafana/grafana/pkg/services/datasources/permissions"
|
|
datasourceservice "github.com/grafana/grafana/pkg/services/datasources/service"
|
|
"github.com/grafana/grafana/pkg/services/encryption"
|
|
"github.com/grafana/grafana/pkg/services/encryption/ossencryption"
|
|
"github.com/grafana/grafana/pkg/services/kmsproviders"
|
|
"github.com/grafana/grafana/pkg/services/kmsproviders/osskmsproviders"
|
|
"github.com/grafana/grafana/pkg/services/ldap"
|
|
"github.com/grafana/grafana/pkg/services/licensing"
|
|
"github.com/grafana/grafana/pkg/services/login"
|
|
"github.com/grafana/grafana/pkg/services/login/authinfoservice"
|
|
"github.com/grafana/grafana/pkg/services/provisioning"
|
|
"github.com/grafana/grafana/pkg/services/searchusers"
|
|
"github.com/grafana/grafana/pkg/services/searchusers/filters"
|
|
"github.com/grafana/grafana/pkg/services/sqlstore/migrations"
|
|
"github.com/grafana/grafana/pkg/services/validations"
|
|
"github.com/grafana/grafana/pkg/setting"
|
|
)
|
|
|
|
var wireExtsBasicSet = wire.NewSet(
|
|
auth.ProvideUserAuthTokenService,
|
|
wire.Bind(new(models.UserTokenService), new(*auth.UserAuthTokenService)),
|
|
wire.Bind(new(models.UserTokenBackgroundService), new(*auth.UserAuthTokenService)),
|
|
licensing.ProvideService,
|
|
wire.Bind(new(models.Licensing), new(*licensing.OSSLicensingService)),
|
|
setting.ProvideProvider,
|
|
wire.Bind(new(setting.Provider), new(*setting.OSSImpl)),
|
|
ossaccesscontrol.ProvideService,
|
|
wire.Bind(new(accesscontrol.RoleRegistry), new(*ossaccesscontrol.OSSAccessControlService)),
|
|
wire.Bind(new(accesscontrol.AccessControl), new(*ossaccesscontrol.OSSAccessControlService)),
|
|
validations.ProvideValidator,
|
|
wire.Bind(new(models.PluginRequestValidator), new(*validations.OSSPluginRequestValidator)),
|
|
provisioning.ProvideService,
|
|
wire.Bind(new(provisioning.ProvisioningService), new(*provisioning.ProvisioningServiceImpl)),
|
|
backgroundsvcs.ProvideBackgroundServiceRegistry,
|
|
wire.Bind(new(registry.BackgroundServiceRegistry), new(*backgroundsvcs.BackgroundServiceRegistry)),
|
|
datasourceservice.ProvideCacheService,
|
|
wire.Bind(new(datasources.CacheService), new(*datasourceservice.CacheServiceImpl)),
|
|
migrations.ProvideOSSMigrations,
|
|
wire.Bind(new(registry.DatabaseMigrator), new(*migrations.OSSMigrations)),
|
|
authinfoservice.ProvideOSSUserProtectionService,
|
|
wire.Bind(new(login.UserProtectionService), new(*authinfoservice.OSSUserProtectionImpl)),
|
|
ossencryption.ProvideService,
|
|
wire.Bind(new(encryption.Internal), new(*ossencryption.Service)),
|
|
filters.ProvideOSSSearchUserFilter,
|
|
wire.Bind(new(models.SearchUserFilter), new(*filters.OSSSearchUserFilter)),
|
|
searchusers.ProvideUsersService,
|
|
wire.Bind(new(searchusers.Service), new(*searchusers.OSSService)),
|
|
signature.ProvideOSSAuthorizer,
|
|
wire.Bind(new(plugins.PluginLoaderAuthorizer), new(*signature.UnsignedPluginAuthorizer)),
|
|
provider.ProvideService,
|
|
wire.Bind(new(plugins.BackendFactoryProvider), new(*provider.Service)),
|
|
acdb.ProvideService,
|
|
wire.Bind(new(resourcepermissions.Store), new(*acdb.AccessControlStore)),
|
|
wire.Bind(new(accesscontrol.PermissionsProvider), new(*acdb.AccessControlStore)),
|
|
osskmsproviders.ProvideService,
|
|
wire.Bind(new(kmsproviders.Service), new(osskmsproviders.Service)),
|
|
ldap.ProvideGroupsService,
|
|
wire.Bind(new(ldap.Groups), new(*ldap.OSSGroups)),
|
|
permissions.ProvideDatasourcePermissionsService,
|
|
wire.Bind(new(permissions.DatasourcePermissionsService), new(*permissions.OSSDatasourcePermissionsService)),
|
|
ossaccesscontrol.ProvidePermissionsServices,
|
|
wire.Bind(new(accesscontrol.PermissionsServices), new(*ossaccesscontrol.PermissionsServices)),
|
|
)
|
|
|
|
var wireExtsSet = wire.NewSet(
|
|
wireSet,
|
|
wireExtsBasicSet,
|
|
)
|
|
|
|
var wireExtsTestSet = wire.NewSet(
|
|
wireTestSet,
|
|
wireExtsBasicSet,
|
|
)
|