grafana/pkg/services/ngalert/api
Yuri Tseretyan e593d36ed8
Alerting: Update rule access control to explicitly check for permissions "alert.rules:read" and "folders:read" (#78289)
* require "folders:read" and "alert.rules:read"  in all rules API requests (write and read). 

* add check for permissions "folders:read" and "alert.rules:read" to AuthorizeAccessToRuleGroup and HasAccessToRuleGroup

* check only access to datasource in rule testing API

---------

Co-authored-by: William Wernert <william.wernert@grafana.com>
2024-03-19 22:20:30 -04:00
..
hcl Alerting: Export of alert rules in HCL format (#73166) 2023-09-11 11:48:23 -04:00
test-data Alerting: Support for simplified notification settings in rule API (#81011) 2024-02-15 09:45:10 -05:00
tooling Alerting: Decrypt secrets before sending configuration to the remote Alertmanager (#83640) 2024-03-19 12:12:03 +01:00
api_alertmanager_guards_test.go fix(alerting): add a proper compare func for location in mute timings (#82153) 2024-02-08 13:36:09 +01:00
api_alertmanager_guards.go fix(alerting): add a proper compare func for location in mute timings (#82153) 2024-02-08 13:36:09 +01:00
api_alertmanager_test.go Alerting: Support for simplified notification settings in rule API (#81011) 2024-02-15 09:45:10 -05:00
api_alertmanager.go Alerting: Support for simplified notification settings in rule API (#81011) 2024-02-15 09:45:10 -05:00
api_configuration_test.go Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
api_configuration.go Grafana: Replace magic number with a constant variable in response status (#80132) 2024-02-27 18:39:51 +02:00
api_notifications_test.go Alerting: Receivers API (read only endpoints) (#81751) 2024-02-05 20:12:15 +02:00
api_notifications.go Alerting: Receivers API (read only endpoints) (#81751) 2024-02-05 20:12:15 +02:00
api_prometheus_test_fixtures.go Expressions: Fixes the issue showing expressions editor (#62510) 2023-01-31 18:50:10 +01:00
api_prometheus_test.go Alerting: Extract alerting rules authorization logic to a service (#77006) 2023-11-15 18:54:54 +02:00
api_prometheus.go Alerting: Update API to use folders' full paths (#81214) 2024-02-06 17:12:13 -05:00
api_provisioning_test.go Alerting: Disallow invalid rule namespace UIDs in provisioning API (#83938) 2024-03-14 09:58:25 -04:00
api_provisioning.go Alerting: Update rule provisioning service to accept user (#84480) 2024-03-14 12:04:10 -04:00
api_ruler_export_test.go Alerting: Update rule access control to explicitly check for permissions "alert.rules:read" and "folders:read" (#78289) 2024-03-19 22:20:30 -04:00
api_ruler_export.go Alerting: Export rule validation logic and make it portable (#83555) 2024-02-28 14:40:13 -06:00
api_ruler_history.go Identity: Unfurl OrgID in pkg/services to allow using identity.Requester interface (#76113) 2023-10-09 10:40:19 +02:00
api_ruler_test.go Alerting: Update rule access control to explicitly check for permissions "alert.rules:read" and "folders:read" (#78289) 2024-03-19 22:20:30 -04:00
api_ruler_validation_test.go Alerting: Export rule validation logic and make it portable (#83555) 2024-02-28 14:40:13 -06:00
api_ruler_validation.go Alerting: Export rule validation logic and make it portable (#83555) 2024-02-28 14:40:13 -06:00
api_ruler.go Alerting: Export rule validation logic and make it portable (#83555) 2024-02-28 14:40:13 -06:00
api_testing_test.go Alerting: Update API to use folders' full paths (#81214) 2024-02-06 17:12:13 -05:00
api_testing.go Alerting: Update rule access control to explicitly check for permissions "alert.rules:read" and "folders:read" (#78289) 2024-03-19 22:20:30 -04:00
api.go Alerting: Remove legacy alerting (#83671) 2024-03-14 15:36:35 +01:00
authorization_test.go Alerting: Remove legacy alerting (#83671) 2024-03-14 15:36:35 +01:00
authorization.go Alerting: Update rule access control to explicitly check for permissions "alert.rules:read" and "folders:read" (#78289) 2024-03-19 22:20:30 -04:00
compat_contact_points_test.go Alerting: Export of contact points to HCL (#75849) 2023-10-12 22:33:57 +01:00
compat_contact_points.go Alerting: Export of contact points to HCL (#75849) 2023-10-12 22:33:57 +01:00
compat_test.go Alerting: introduce AlertQuery in definitions package (#63825) 2023-03-27 11:55:13 -04:00
compat.go Alerting: Support for simplified notification settings in rule API (#81011) 2024-02-15 09:45:10 -05:00
configuration.go Chore: Move ReqContext to contexthandler service (#62102) 2023-01-27 08:50:36 +01:00
errors.go Alerting: Update rule access control to return errutil errors (#78284) 2023-12-02 01:42:11 +02:00
forking_alertmanager.go Alerting: Template Testing API (#67450) 2023-04-28 15:56:59 +01:00
forking_prometheus.go Chore: Move ReqContext to contexthandler service (#62102) 2023-01-27 08:50:36 +01:00
forking_ruler.go Alerting: Rule Modify Export APIs (#75322) 2023-10-02 11:47:59 -04:00
generated_base_api_alertmanager.go instrumentation: change slogroup for alerting handlers to high-slow (#75460) 2023-09-29 14:56:48 +02:00
generated_base_api_configuration.go instrumentation: change slogroup for alerting handlers to high-slow (#75460) 2023-09-29 14:56:48 +02:00
generated_base_api_history.go instrumentation: change slogroup for alerting handlers to high-slow (#75460) 2023-09-29 14:56:48 +02:00
generated_base_api_notifications.go Alerting: Receivers API (read only endpoints) (#81751) 2024-02-05 20:12:15 +02:00
generated_base_api_prometheus.go instrumentation: change slogroup for alerting handlers to high-slow (#75460) 2023-09-29 14:56:48 +02:00
generated_base_api_provisioning.go Alerting: Support deleting rule groups in the provisioning API (#83514) 2024-02-28 10:19:02 -05:00
generated_base_api_ruler.go ngalert make: Support GNU install on Darwin (#78482) 2023-12-04 10:11:39 -05:00
generated_base_api_testing.go instrumentation: change slogroup for alerting handlers to high-slow (#75460) 2023-09-29 14:56:48 +02:00
hooks_test.go Alerting: Use mux router to match hooks, add support for path variables and methods (#79345) 2023-12-12 14:43:11 -06:00
hooks.go Alerting: Use mux router to match hooks, add support for path variables and methods (#79345) 2023-12-12 14:43:11 -06:00
lotex_am.go Caching: Refactor enterprise query caching middleware to a wire service (#65616) 2023-04-12 12:30:33 -04:00
lotex_prom.go Caching: Refactor enterprise query caching middleware to a wire service (#65616) 2023-04-12 12:30:33 -04:00
lotex_ruler_test.go Alerting: Escape namespace and group path parameters (#80504) 2024-02-16 09:43:47 +01:00
lotex_ruler.go Alerting: Escape namespace and group path parameters (#80504) 2024-02-16 09:43:47 +01:00
notifications.go Alerting: Receivers API (read only endpoints) (#81751) 2024-02-05 20:12:15 +02:00
persist.go Alerting: Disallow invalid rule namespace UIDs in provisioning API (#83938) 2024-03-14 09:58:25 -04:00
promql_compat_test.go Alerting: Update prometheus version (#65688) 2023-03-31 16:34:35 +02:00
promql_compat.go Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00
provisioning.go Alerting: Support deleting rule groups in the provisioning API (#83514) 2024-02-28 10:19:02 -05:00
ruler_history.go Alerting: Add endpoint for querying state history (#62166) 2023-02-02 11:34:00 -06:00
testing_api.go Alerting: Repurpose rule testing endpoint to return potential alerts (#69755) 2023-06-08 18:59:54 -04:00
testing.go Alerting: Update rule access control to return errutil errors (#78284) 2023-12-02 01:42:11 +02:00
util_test.go Chore: remove IsDisabled method for access control (#74340) 2023-09-05 11:04:39 +01:00
util.go Chore: use any rather than interface{} (#74066) 2023-08-30 18:46:47 +03:00