opensource/grafana
1
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-08-02 13:45:29 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
grafana/pkg/api
History
Dimitris Sotirakis 2c8ac1f58f Security Fix: Fine-grained access control enables organization admins to create/modify/delete user roles in other organization (#41694) 
* 8.2.4: Fine-grained access control enables organization admins to create/modify/delete user roles in other organization

* Revert back calls with ScopeOrgID

Co-authored-by: gamab <gabi.mabs@gmail.com>
2021-11-15 15:35:09 +01:00
..
apierrors
Migrate to Wire for dependency injection (#32289)
2021-08-25 15:11:22 +02:00
avatar
remove the global log error/warn etc functions (#41404)
2021-11-08 17:56:56 +01:00
datasource
Chore: Remove unused Go code (#28852)
2020-11-17 11:51:31 +01:00
dtos
Plugins Catalog: Install and show the latest compatible version of a plugin (#41003)
2021-11-12 11:07:12 +01:00
frontendlogging
Plugins: Refactor Plugin Management (#40477)
2021-11-01 10:53:33 +01:00
navlinks
AccessControl: frontend changes for adding FGAC to licensing (#39484)
2021-10-05 14:54:26 +01:00
pluginproxy
Encryption: Use secrets service (#40251)
2021-11-04 18:47:21 +02:00
response
[Alerting] Forking LoTex ruler (#32138)
2021-03-19 10:32:13 -04:00
routing
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
static
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
acl.go
Chore: Propagate context for dashboard guardian (#39201)
2021-09-23 17:43:32 +02:00
admin_provisioning_test.go
Chore: Add context to org (#40685)
2021-11-03 11:31:56 +01:00
admin_provisioning.go
Chore: Add context to org (#40685)
2021-11-03 11:31:56 +01:00
admin_test.go
Access Control: Add fine-grained access control to GET stats and settings handlers (#35622)
2021-06-14 17:36:48 +02:00
admin_users_test.go
add context to getsignedinUser calls (#35963)
2021-06-21 07:51:33 +02:00
admin_users.go
Chore: add context to login (#41316)
2021-11-08 15:53:51 +01:00
admin.go
Chore: Add context to star and stats (#39591)
2021-09-28 17:54:45 +02:00
alerting_test.go
Search: add sort information in dashboard results (#30609)
2021-02-11 08:49:16 +01:00
alerting.go
add context in the alert_notification (#41307)
2021-11-05 16:41:24 +08:00
annotations_test.go
Annotations: Adds tags endpoint (#36199)
2021-06-30 13:42:54 +02:00
annotations.go
Chore: Propagate context for dashboard guardian (#39201)
2021-09-23 17:43:32 +02:00
api.go
Security Fix: Fine-grained access control enables organization admins to create/modify/delete user roles in other organization (#41694)
2021-11-15 15:35:09 +01:00
apikey.go
Accesscontrol: Add additional API keys to service account, move cloneserviceaccount to sqlstore (#41189)
2021-11-11 10:42:21 +00:00
app_routes.go
remove the global log error/warn etc functions (#41404)
2021-11-08 17:56:56 +01:00
basic_auth_test.go
Macaron: remove custom Request type (#37874)
2021-09-01 11:18:30 +02:00
basic_auth.go
Macaron: remove custom Request type (#37874)
2021-09-01 11:18:30 +02:00
common_test.go
AccessControl: Add FGAC to orgs endpoints (#39579)
2021-10-27 13:13:59 +02:00
dashboard_permission_test.go
Forbid creation of dashboard permissions with both a user and a team (#40104)
2021-10-13 12:16:58 -06:00
dashboard_permission.go
Forbid creation of dashboard permissions with both a user and a team (#40104)
2021-10-13 12:16:58 -06:00
dashboard_snapshot_test.go
Chore: Refactor securedata to remove global encryption calls from dashboard snapshots (#38714)
2021-09-01 13:05:15 +02:00
dashboard_snapshot.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
dashboard_test.go
Live: crud for remote write backends (#40147)
2021-11-05 12:13:40 +03:00
dashboard.go
Chore: Add alert ctx (#41161)
2021-11-03 14:10:39 +01:00
dataproxy.go
Data Source Proxy: Migrate proxy to its own service and make more extensible (#31927)
2021-03-17 13:10:40 -04:00
datasources_test.go
Plugins: Refactor Plugin Management (#40477)
2021-11-01 10:53:33 +01:00
datasources.go
API: return resource ID when deleting datasource with UID and library element (#41342)
2021-11-05 15:06:14 +01:00
fakes.go
Plugins: Refactor Plugin Management (#40477)
2021-11-01 10:53:33 +01:00
folder_permission_test.go
Chore: Propagate context for dashboard guardian (#39201)
2021-09-23 17:43:32 +02:00
folder_permission.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
folder_test.go
Chore: GetDashboardQuery should be dispatched using DispatchCtx (#36877)
2021-09-14 16:08:04 +02:00
folder.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
frontend_logging_test.go
Plugins: Refactor Plugin Management (#40477)
2021-11-01 10:53:33 +01:00
frontend_logging.go
Logging: sourcemap support for frontend stacktraces (#30590)
2021-02-04 08:37:28 +02:00
frontend_metrics.go
FrontendMetrics: Adds new backend api that frontend can use to push frontend measurements and counters to prometheus (#32593)
2021-04-01 20:04:02 +02:00
frontendsettings_test.go
Plugins: Refactor Plugin Management (#40477)
2021-11-01 10:53:33 +01:00
frontendsettings.go
PluginsCatalog: Add backend support for hiding plugins in plugins catalog (#41563)
2021-11-15 10:53:35 +01:00
grafana_com_proxy.go
Plugins Catalog: Install and show the latest compatible version of a plugin (#41003)
2021-11-12 11:07:12 +01:00
health_test.go
Context: Add context to /api/health calls (#40031)
2021-10-11 14:35:03 +02:00
health.go
Context: Add context to /api/health calls (#40031)
2021-10-11 14:35:03 +02:00
http_server_test.go
Tests: Batch of GoConvey to Testify conversions (#27008)
2020-08-14 14:43:25 +02:00
http_server.go
Replace encryption.Service usages by secrets.Service (#41625)
2021-11-12 12:16:39 +01:00
index.go
Navigation: remove redundant config nav link (#41252)
2021-11-03 14:07:58 +01:00
ldap_debug_test.go
add context to getsignedinUser calls (#35963)
2021-06-21 07:51:33 +02:00
ldap_debug.go
Chore: add context to login (#41316)
2021-11-08 15:53:51 +01:00
login_oauth_test.go
OAuth: Support PKCE (#39948)
2021-10-13 16:45:15 +02:00
login_oauth.go
remove the global log error/warn etc functions (#41404)
2021-11-08 17:56:56 +01:00
login_test.go
Encryption: Use secrets service (#40251)
2021-11-04 18:47:21 +02:00
login.go
remove the global log error/warn etc functions (#41404)
2021-11-08 17:56:56 +01:00
metrics.go
Chore: Refactor usage of legacy data contracts (#41218)
2021-11-10 11:52:16 +01:00
org_invite.go
Chore: add context to login (#41316)
2021-11-08 15:53:51 +01:00
org_test.go
AccessControl: Add FGAC to orgs endpoints (#39579)
2021-10-27 13:13:59 +02:00
org_users_test.go
Create search filters by interface (#39843)
2021-10-07 16:06:16 +02:00
org_users.go
Chore: Add context to org users (#39526)
2021-09-27 16:43:16 +02:00
org.go
Chore: Add context to org (#40685)
2021-11-03 11:31:56 +01:00
password.go
Chore: add context to login (#41316)
2021-11-08 15:53:51 +01:00
playlist_play.go
Chore: Propagate context for search (#41010)
2021-10-28 11:29:07 +02:00
playlist.go
Chore: Propagate context for search (#41010)
2021-10-28 11:29:07 +02:00
plugins_test.go
Plugins: Refactor Plugin Management (#40477)
2021-11-01 10:53:33 +01:00
plugins.go
Add context for GetAlertNotificationUidQuery (#41633)
2021-11-12 14:35:38 +01:00
preferences_test.go
AccessControl: Add FGAC to orgs endpoints (#39579)
2021-10-27 13:13:59 +02:00
preferences.go
Chore: Propagate context for preferences (#41167)
2021-11-02 13:41:45 +01:00
quota_test.go
AccessControl: Add FGAC to orgs endpoints (#39579)
2021-10-27 13:13:59 +02:00
quota.go
AccessControl: Add FGAC to orgs endpoints (#39579)
2021-10-27 13:13:59 +02:00
render.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
roles.go
AccessControl: Create FGAC roles for orgs (#40526)
2021-10-27 11:01:21 +02:00
search.go
Chore: Propagate context for search (#41010)
2021-10-28 11:29:07 +02:00
short_url_test.go
Chore: Refactor short url api test (#35051)
2021-06-01 20:34:59 +02:00
short_url.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
signup.go
Chore: add context to login (#41316)
2021-11-08 15:53:51 +01:00
stars.go
Profile: Fixes profile preferences being accessible when anonymous access was enabled (#31516)
2021-02-27 18:04:28 +01:00
team_members_test.go
Add an option to hide certain users in the UI (#28942)
2020-11-24 12:10:32 +01:00
team_members.go
Chore: Add context to team (#40504)
2021-10-18 14:02:39 +02:00
team_test.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
team.go
Chore: Propagate context for preferences (#41167)
2021-11-02 13:41:45 +01:00
user_test.go
Create search filters by interface (#39843)
2021-10-07 16:06:16 +02:00
user_token_test.go
add context to getsignedinUser calls (#35963)
2021-06-21 07:51:33 +02:00
user_token.go
add context to getsignedinUser calls (#35963)
2021-06-21 07:51:33 +02:00
user.go
Chore: Add context to user (#39649)
2021-10-04 15:46:09 +02:00
utils.go
Permissions: Validate against Team/User permission role update (#29101)
2020-11-18 15:36:41 +01:00