opensource/grafana
1
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-08-02 09:32:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

Access Control: Remove built-in role assignment by default (#49058)

Browse Source 
* Remove FF-bultins

* Add a param to test br-simplifying
This commit is contained in:
Gabriel MABILLE
2022-05-19 09:29:36 +02:00
committed by GitHub
parent a3c5834594
commit 5b6d20fbce
7 changed files with 7 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/setting/setting.go
View File

@ -447,6 +447,9 @@ type Cfg struct {
// Access Control
RBACEnabled bool
RBACPermissionCache bool
// Undocumented option as a backup in case removing builtin-role assignment
// fails
RBACBuiltInRoleAssignmentEnabled bool
}
type CommandLineArgs struct {
@ -1360,6 +1363,7 @@ func readAccessControlSettings(iniFile *ini.File, cfg *Cfg) {
rbac := iniFile.Section("rbac")
cfg.RBACEnabled = rbac.Key("enabled").MustBool(true)
cfg.RBACPermissionCache = rbac.Key("permission_cache").MustBool(true)
cfg.RBACBuiltInRoleAssignmentEnabled = rbac.Key("builtin_role_assignment_enabled").MustBool(false)
}
func readUserSettings(iniFile *ini.File, cfg *Cfg) error {