Ieva a245531f0c Access control: service account role check (#47710) ...

* forbid setting role higher than user's role

* change response code

* can assign API key permissions to non-admin users

* add: assign viewer role directly upon creation

* refactor: add AddSATcommand infavor of AddAPIkey

* refactor: frontend fixes for ServiceAccountToken

Co-authored-by: eleijonmarck <eric.leijonmarck@gmail.com>

2022-04-13 18:11:03 +02:00

..

apierrors

Plugins: Refactor plugin dashboards (#44315)

2022-01-28 10:28:33 +01:00

avatar

Dashboard: Mix initials and custom gravatars in recent viewers list (#47212)

2022-04-05 22:56:17 -04:00

datasource

Check for empty URLs when creating/updating a data source (#42837)

2022-01-31 12:39:55 -03:00

docs

update docs, simplify actions and scopes (#47067)

2022-04-04 13:53:58 +01:00

dtos

Navigation: Show only + icons in overlay menu for new NavBar (#47347)

2022-04-12 14:51:40 +01:00

frontendlogging

Logger migration from log15 to gokit/log (#41636)

2022-01-06 22:28:05 +08:00

navlinks

show admin nav link it the user only has permissions to view licensing and not other pages under admin node (#41948)

2021-11-19 11:02:13 +00:00

pluginproxy

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

response

…

routing

Instrumentation: Fix HTTP request instrumentation of authentication failures (#44234)

2022-02-02 18:48:46 +01:00

static

API: Extract OpenAPI specification from source code using go-swagger (#40528)

2022-02-08 13:38:43 +01:00

accesscontrol.go

update docs, simplify actions and scopes (#47067)

2022-04-04 13:53:58 +01:00

admin_provisioning_test.go

Chore: Add context to org (#40685)

2021-11-03 11:31:56 +01:00

admin_provisioning.go

Chore: Remove Dispatch and AddHandler (#42603)

2021-12-02 18:08:59 +01:00

admin_test.go

Chore: Remove bus from admin (#44920)

2022-02-04 17:53:58 +01:00

admin_users_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

admin_users.go

Chore: Remove bus from admin users (#44869)

2022-02-04 13:45:42 -05:00

admin.go

Chore: Remove bus from admin (#44920)

2022-02-04 17:53:58 +01:00

alerting_test.go

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

alerting.go

Linter: fix linter for golangci-lint version v1.45.0 (#47623)

2022-04-12 08:15:16 -04:00

annotations_test.go

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

annotations.go

Access control: SQL filtering for annotation listing (#47467)

2022-04-11 13:18:38 +01:00

api.go

Access control: service account role check (#47710)

2022-04-13 18:11:03 +02:00

apikey.go

Access control: service account role check (#47710)

2022-04-13 18:11:03 +02:00

app_routes.go

Instrumentation: Proxy status code correction and various improvements (#47473)

2022-04-11 13:17:08 +02:00

basic_auth_test.go

Macaron: remove custom Request type (#37874)

2021-09-01 11:18:30 +02:00

basic_auth.go

Macaron: remove custom Request type (#37874)

2021-09-01 11:18:30 +02:00

comments.go

Comments: support live comments in dashboards and annotations (#44980)

2022-02-22 10:47:42 +03:00

common_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

dashboard_permission_test.go

Chore: Remove bus from dashboard service (#46829)

2022-03-22 14:36:50 +01:00

dashboard_permission.go

Access control: use uid for dashboard and folder scopes (#46807)

2022-03-30 15:14:26 +02:00

dashboard_snapshot_test.go

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

dashboard_snapshot.go

add dashboardsnap as service of http server (#45461)

2022-02-17 09:31:26 +01:00

dashboard_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

dashboard.go

Fix unmaarshal of double pointer (#47586)

2022-04-12 09:30:34 +02:00

dataproxy.go

…

datasources_test.go

Access control: Move data source actions and scopes to datasource package (#46594)

2022-03-16 15:11:03 +01:00

datasources.go

Access control: Change data source permissions to be based on UID (#46741)

2022-03-24 12:21:26 +01:00

fakes.go

Plugins: Plugin Store API returns DTO model (#41340)

2021-11-17 12:04:22 +01:00

folder_permission_test.go

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

folder_permission.go

Access control: use uid for dashboard and folder scopes (#46807)

2022-03-30 15:14:26 +02:00

folder_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

folder.go

Access control: Move call to create default permissions into folder and dashboard service (#46186)

2022-03-10 12:58:18 +01:00

frontend_logging_test.go

Security: Sync security changes on main (#45083)

2022-02-09 13:44:38 +01:00

frontend_logging.go

Logger migration from log15 to gokit/log (#41636)

2022-01-06 22:28:05 +08:00

frontend_metrics.go

Chore: Report frontend metrics for JS/CSS load time (#42421)

2021-12-02 09:34:39 +01:00

frontendsettings_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

frontendsettings.go

Profile/Help: Expose option to disable profile section and help menu (#46308)

2022-03-29 16:27:53 +01:00

grafana_com_proxy.go

Instrumentation: Proxy status code correction and various improvements (#47473)

2022-04-11 13:17:08 +02:00

health_test.go

Chore: Remove bus from health api (#44897)

2022-02-04 14:33:35 +01:00

health.go

Chore: Remove bus from health api (#44897)

2022-02-04 14:33:35 +01:00

http_server_test.go

Plugins: Make backend plugin metrics endpoints available with optional authentication (#46467)

2022-03-29 11:18:26 +02:00

http_server.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

index.go

Navigation: Show only + icons in overlay menu for new NavBar (#47347)

2022-04-12 14:51:40 +01:00

ldap_debug_test.go

Chore: Remove bus.Dispatch from some login packages (#47248)

2022-04-04 20:36:15 +02:00

ldap_debug.go

Chore: Remove bus.Dispatch from some login packages (#47248)

2022-04-04 20:36:15 +02:00

login_oauth_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

login_oauth.go

Chore: add setting to skip org assignment for external users (#34834)

2022-02-21 17:34:47 +01:00

login_test.go

Chore: Remove bus.Dispatch from some login packages (#47248)

2022-04-04 20:36:15 +02:00

login.go

Chore: Remove bus.Dispatch from some login packages (#47248)

2022-04-04 20:36:15 +02:00

metrics_test.go

ValidatedQueries: start of validated queries API (#44731)

2022-03-07 09:33:01 -09:00

metrics.go

Plugins: Add deprecation notice for /api/tsdb/query endpoint (#45238)

2022-03-30 17:46:06 +02:00

org_invite.go

Remove bus from org invite api (#44530)

2022-01-31 17:24:52 +01:00

org_test.go

ValidatedQueries: start of validated queries API (#44731)

2022-03-07 09:33:01 -09:00

org_users_test.go

ValidatedQueries: start of validated queries API (#44731)

2022-03-07 09:33:01 -09:00

org_users.go

AccessControl: Fix locked role picker in orgs/edit page (#46539)

2022-03-24 08:58:10 +01:00

org.go

Chore: Remove bus.Dispatch from provisioning services (#44989)

2022-02-23 11:12:37 +01:00

password.go

Chore: Remove bus from password (#44482)

2022-02-03 10:33:46 +01:00

playlist_play.go

Chore: Remove bus from signup and playlist api (#44485)

2022-01-27 10:33:02 +01:00

playlist.go

Chore: Remove bus from signup and playlist api (#44485)

2022-01-27 10:33:02 +01:00

plugin_dashboards_test.go

Plugins: Refactor GetPluginDashboards/LoadPluginDashboard (#46316)

2022-03-10 18:38:04 +01:00

plugin_dashboards.go

Plugins: Refactor GetPluginDashboards/LoadPluginDashboard (#46316)

2022-03-10 18:38:04 +01:00

plugin_metrics_test.go

Plugins: Make backend plugin metrics endpoints available with optional authentication (#46467)

2022-03-29 11:18:26 +02:00

plugin_metrics.go

Plugins: Make backend plugin metrics endpoints available with optional authentication (#46467)

2022-03-29 11:18:26 +02:00

plugins_test.go

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

plugins.go

Plugins: Pass OAuth Token to CallResource Function (#47028)

2022-04-05 17:40:34 +02:00

preferences_test.go

Navigation: Introduce a preferences table to store Navbar preferences (#44914)

2022-03-17 12:07:20 +00:00

preferences.go

Query history: Save user preferences in database (#47506)

2022-04-12 11:42:42 +02:00

quota_test.go

ValidatedQueries: start of validated queries API (#44731)

2022-03-07 09:33:01 -09:00

quota.go

Remove bus from quota, preferences, plugins, user_token (#44762)

2022-02-03 09:20:20 +01:00

render.go

Dash previews: populate crawler queue from SQL query (#44083)

2022-02-09 13:23:32 +04:00

search.go

remove bus from search service (#44825)

2022-02-03 18:46:38 +01:00

short_url_test.go

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

short_url.go

Chore: Refactor api handlers to use web.Bind (#42199)

2021-11-29 10:18:01 +01:00

signup.go

Remove bus from org invite api (#44530)

2022-01-31 17:24:52 +01:00

stars.go

Chore: Remove bus from team (#44218)

2022-01-24 11:52:35 +01:00

swagger.go

API: Extract OpenAPI specification from source code using go-swagger (#40528)

2022-02-08 13:38:43 +01:00

team_members_test.go

ValidatedQueries: start of validated queries API (#44731)

2022-03-07 09:33:01 -09:00

team_members.go

Access control: Set default permissions for data sources when using access control (#45482)

2022-02-17 14:03:45 +01:00

team_test.go

Access Control: Add test flag to enable access control (#46780)

2022-03-22 20:48:32 +01:00

team.go

AccessControl: Fix locked role picker in orgs/edit page (#46539)

2022-03-24 08:58:10 +01:00

user_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

user_token_test.go

Chore: Remove bus.Bus field (#47695)

2022-04-13 15:24:13 +02:00

user_token.go

Remove bus from quota, preferences, plugins, user_token (#44762)

2022-02-03 09:20:20 +01:00

user.go

AccessControl: Fix locked role picker in orgs/edit page (#46539)

2022-03-24 08:58:10 +01:00

utils.go

…