grafana/pkg/services/accesscontrol
Ieva ef4c2672b3
Access control: SQL filtering for annotation listing (#47467)
* pass in user to attribute scope resolver

* add SQL filter to annotation listing

* check annotation FGAC permissions before exposing them for commenting

* remove the requirement to be able to list all annotations from annotation listing endpoint

* adding tests for annotation listing

* remove changes that got moved to a different PR

* unused var

* Update pkg/services/sqlstore/annotation.go

Co-authored-by: Ezequiel Victorero <evictorero@gmail.com>

* remove unneeded check

* remove unneeded check

* undo accidental change

* undo accidental change

* doc update

* move tests

* redo the approach for passing the user in for scope resolution

* accidental change

* cleanup

* error handling

Co-authored-by: Ezequiel Victorero <evictorero@gmail.com>
2022-04-11 13:18:38 +01:00
..
api AccessControl: Add endpoint to get user permissions (#45309) 2022-02-11 17:40:43 +01:00
database Access Control: Support other attributes than id for resource permissions (#46727) 2022-03-21 17:58:18 +01:00
middleware AccessControl: Fix locked role picker in orgs/edit page (#46539) 2022-03-24 08:58:10 +01:00
mock Adding FGAC annotations validation for creation and deletion (#46736) 2022-03-21 14:28:39 -03:00
ossaccesscontrol AccessControl: Remove package lists for roles and grants (#47141) 2022-04-06 09:31:14 +02:00
resourcepermissions Dashboard/Folder permission fix session (#47174) 2022-04-05 14:28:23 +02:00
accesscontrol_bench_test.go Access Control: Support other attributes than id for resource permissions (#46727) 2022-03-21 17:58:18 +01:00
accesscontrol_test.go Access Control: Support other attributes than id for resource permissions (#46727) 2022-03-21 17:58:18 +01:00
accesscontrol.go Access Control: Support other attributes than id for resource permissions (#46727) 2022-03-21 17:58:18 +01:00
errors.go AccessControl: Resolve attribute based scopes to id based scopes (#40742) 2022-01-18 17:34:35 +01:00
evaluator_test.go AccessControl: Resolve attribute based scopes to id based scopes (#40742) 2022-01-18 17:34:35 +01:00
evaluator.go AccessControl: improve denied message (#44551) 2022-01-28 12:17:24 +01:00
filter_bench_test.go Access Control: Support other attributes than id for resource permissions (#46727) 2022-03-21 17:58:18 +01:00
filter_test.go Access Control: Correctly check for id suffix (#46824) 2022-03-22 13:48:15 +01:00
filter.go Access control: SQL filtering for annotation listing (#47467) 2022-04-11 13:18:38 +01:00
models.go Access control: SQL filtering for annotation listing (#47467) 2022-04-11 13:18:38 +01:00
roles_test.go AccessControl: Remove package lists for roles and grants (#47141) 2022-04-06 09:31:14 +02:00
roles.go AccessControl: Remove package lists for roles and grants (#47141) 2022-04-06 09:31:14 +02:00
scope_test.go Dashboard/Folder permission fix session (#47174) 2022-04-05 14:28:23 +02:00
scope.go Dashboard/Folder permission fix session (#47174) 2022-04-05 14:28:23 +02:00