From 3963ed37540891d6447d613d3bfc0b0ebbff5c71 Mon Sep 17 00:00:00 2001 From: Gabriel MABILLE Date: Tue, 18 Oct 2022 11:15:52 +0200 Subject: [PATCH] RBAC: Allow access to `/dashboards` when user has dashboards create (#56712) * RBAC: Allow access to dashboards when user has dashboards create * Remove eval any that I didn't add on purpose --- pkg/services/navtree/navtreeimpl/navtree.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkg/services/navtree/navtreeimpl/navtree.go b/pkg/services/navtree/navtreeimpl/navtree.go index 65c1f3bfa25..fbe13fc8d73 100644 --- a/pkg/services/navtree/navtreeimpl/navtree.go +++ b/pkg/services/navtree/navtreeimpl/navtree.go @@ -91,7 +91,9 @@ func (s *ServiceImpl) GetNavTree(c *models.ReqContext, hasEditPerm bool, prefs * Children: starredItemsLinks, EmptyMessageId: "starred-empty", }) + } + if hasAccess(ac.ReqSignedIn, ac.EvalAny(ac.EvalPermission(dashboards.ActionDashboardsRead), ac.EvalPermission(dashboards.ActionDashboardsCreate))) { dashboardChildLinks := s.buildDashboardNavLinks(c, hasEditPerm) dashboardLink := &navtree.NavLink{