Auth: Add None role to Viewer case (#96624)

Add None role to Viewer case
pull/96662/head
linoman 6 months ago committed by GitHub
parent 3fa8df6b62
commit 8b7100a9aa
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 4
      pkg/services/apiserver/auth/authorizer/org_role.go

@ -37,15 +37,13 @@ func (auth orgRoleAuthorizer) Authorize(ctx context.Context, a authorizer.Attrib
default:
return authorizer.DecisionDeny, errorMessageForGrafanaOrgRole(orgRole, a), nil
}
case org.RoleViewer:
case org.RoleViewer, org.RoleNone:
switch a.GetVerb() {
case "get", "list", "watch":
return authorizer.DecisionAllow, "", nil
default:
return authorizer.DecisionDeny, errorMessageForGrafanaOrgRole(orgRole, a), nil
}
case org.RoleNone:
return authorizer.DecisionDeny, errorMessageForGrafanaOrgRole(orgRole, a), nil
}
return authorizer.DecisionDeny, "", nil
}

Loading…
Cancel
Save