Marcus Efraimsson 8fd153edb7 API: Restrict anonymous user information access (#18422) ...

Existing /api/alert-notifications now requires at least editor access.
Existing /api/alert-notifiers now requires at least editor access.
New /api/alert-notifications/lookup returns less information than
/api/alert-notifications and can be access by any authenticated user.
Existing /api/org/users now requires org admin role.
New /api/org/users/lookup returns less information than
/api/org/users and can be access by users that are org admins,
admin in any folder or admin of any team.
UserPicker component now uses /api/org/users/lookup instead
of /api/org/users.

Fixes #17318

2019-08-12 20:03:48 +02:00

..

avatar

move log package to /infra (#17023)

2019-05-13 08:45:54 +02:00

dtos

API: Restrict anonymous user information access (#18422)

2019-08-12 20:03:48 +02:00

live

move log package to /infra (#17023)

2019-05-13 08:45:54 +02:00

pluginproxy

Build: use golangci-lint as a make command (#17739)

2019-07-02 16:06:59 +03:00

routing

removes unused return object

2018-06-26 09:22:31 +02:00

static

pkg: fix codespell issues

2018-04-13 20:31:29 +02:00

admin_ldap.go

LDAP: consistently name the LDAP entities (#17203)

2019-05-22 15:30:03 +03:00

admin_provisioning.go

Provisioning: Add API endpoint to reload provisioning configs (#16579)

2019-04-25 09:06:44 +02:00

admin_users_test.go

Auth: Logout disabled user (#17166)

2019-05-23 15:54:47 +03:00

admin_users.go

Metrics: use consistent naming for exported variables (#18134)

2019-07-16 16:58:46 +02:00

admin.go

Initial Baby Step to refactoring settings from global vars to instance (#11777)

2018-04-30 16:21:04 +02:00

alerting_test.go

API: Restrict anonymous user information access (#18422)

2019-08-12 20:03:48 +02:00

alerting.go

API: Restrict anonymous user information access (#18422)

2019-08-12 20:03:48 +02:00

annotations_test.go

Added PATCH verb end point for annotation op

2019-02-05 09:43:17 +10:00

annotations.go

Address review comments

2019-02-06 06:41:39 +10:00

api.go

API: Restrict anonymous user information access (#18422)

2019-08-12 20:03:48 +02:00

apikey.go

Auth: Duplicate API Key Name Handle With Useful HTTP Code (#17905)

2019-07-11 11:20:34 +03:00

app_routes.go

move log package to /infra (#17023)

2019-05-13 08:45:54 +02:00

basic_auth_test.go

Re-organize packages and add basic auth test

2018-11-19 13:54:13 -05:00

basic_auth.go

Re-organize packages and add basic auth test

2018-11-19 13:54:13 -05:00

common_test.go

Fix: Break redirect loop if oauth_auto_login = true and OAuth login fails (#17974)

2019-07-09 09:37:24 +03:00

common.go

refactoring: making api wrap public

2018-07-02 14:13:18 +02:00

dashboard_permission_test.go

test: fixed usage of wrap in tests.

2018-07-02 17:13:59 +02:00

dashboard_permission.go

permission: generate team avatar url with default

2018-04-04 15:50:45 +02:00

dashboard_snapshot_test.go

snapshots: Add support for deleting external snapshots

2018-12-10 18:47:23 -05:00

dashboard_snapshot.go

Metrics: use consistent naming for exported variables (#18134)

2019-07-16 16:58:46 +02:00

dashboard_test.go

Provisioning: Show file path of provisioning file in save/delete dialogs (#16706)

2019-04-30 13:32:18 +02:00

dashboard.go

Metrics: use consistent naming for exported variables (#18134)

2019-07-16 16:58:46 +02:00

dataproxy_test.go

dataproxy should forward a trailing slash to proxy

2018-10-03 12:55:01 +02:00

dataproxy.go

Metrics: use consistent naming for exported variables (#18134)

2019-07-16 16:58:46 +02:00

datasources_test.go

Return a 404 when deleting a datasource through the API if it doesn't exist and add a test for it to confirm #12313

2018-06-22 21:15:36 -05:00

datasources.go

permissions: cleanup.

2018-10-17 15:58:52 +02:00

folder_permission_test.go

test: fixed usage of wrap in tests.

2018-07-02 17:13:59 +02:00

folder_permission.go

permissions: return user and team avatar in folder permissions api

2018-04-04 15:51:19 +02:00

folder_test.go

Search: Fixes search limits and adds a page parameter (#16458)

2019-04-17 13:07:50 +02:00

folder.go

API: Minor fix for nil pointer when trying to log error during creating new dashboard via the API (#18003)

2019-07-11 09:45:29 +03:00

frontendsettings.go

Elasticsearch: Visualize logs in Explore (#17605)

2019-06-24 21:15:03 +01:00

grafana_com_proxy.go

http: remove dualstack since its deprecated (#16940)

2019-05-08 10:37:48 +02:00

http_server_test.go

Re-organize packages and add basic auth test

2018-11-19 13:54:13 -05:00

http_server.go

Metrics: add LDAP active sync summary metric (#18079)

2019-07-15 08:33:48 +03:00

index.go

Navigation: Fixed double settings menus (#18349)

2019-08-02 14:02:59 +02:00

login_oauth.go

Do not set SameSite for OAuth cookie if cookie_samesite is None (#18392)

2019-08-06 09:50:20 +03:00

login_test.go

Fix: Break redirect loop if oauth_auto_login = true and OAuth login fails (#17974)

2019-07-09 09:37:24 +03:00

login.go

Backend: Do not set SameSite cookie attribute if cookie_samesite is none (#18462)

2019-08-09 09:10:08 +03:00

metrics.go

Alerting: Improve alert rule testing (#16286)

2019-06-25 08:52:17 +02:00

org_invite.go

Metrics: use consistent naming for exported variables (#18134)

2019-07-16 16:58:46 +02:00

org_users.go

API: Restrict anonymous user information access (#18422)

2019-08-12 20:03:48 +02:00

org.go

Metrics: use consistent naming for exported variables (#18134)

2019-07-16 16:58:46 +02:00

password.go

LDAP: consistently name the LDAP entities (#17203)

2019-05-22 15:30:03 +03:00

playlist_play.go

move log package to /infra (#17023)

2019-05-13 08:45:54 +02:00

playlist.go

Codestyle: Fix some goconst issues (#17530)

2019-06-12 07:27:47 +02:00

plugins.go

AddDataSource: Updated page design & categories (#16971)

2019-05-09 11:45:39 +02:00

preferences.go

feat: team preferences

2018-11-12 20:01:53 +01:00

quota.go

Make golint happier

2018-03-22 22:38:44 +01:00

render.go

pkg/util/{ip.go,url.go}: Fix some golint issues

2019-01-28 22:29:20 +01:00

search.go

Metrics: use consistent naming for exported variables (#18134)

2019-07-16 16:58:46 +02:00

signup.go

Metrics: use consistent naming for exported variables (#18134)

2019-07-16 16:58:46 +02:00

stars.go

Make golint happier

2018-03-22 22:38:44 +01:00

team_members.go

Users: show badges for each auth provider (#17869)

2019-07-10 12:06:51 +03:00

team_test.go

API: Minor fix for team creation endpoint when using API key (#18252)

2019-08-08 11:27:47 +03:00

team.go

API: Minor fix for team creation endpoint when using API key (#18252)

2019-08-08 11:27:47 +03:00

user_test.go

admin: adds paging to global user list

2017-02-13 12:59:36 +01:00

user_token_test.go

Api: Fix auth tokens returning wrong seenAt value (#17980)

2019-07-08 14:30:02 +02:00

user_token.go

Api: Fix auth tokens returning wrong seenAt value (#17980)

2019-07-08 14:30:02 +02:00

user.go

SAML: add auth provider label (#18197)

2019-07-19 17:13:29 +03:00