grafana

Commit Graph

Author	SHA1	Message	Date
Mihai Doarna	10411361e7	Team: Add columns external_uid and is_provisioned to the team table (#103285 ) * add columns external_id and is_provisioned to the team table * generate openapi specs * rename column to external_uid * generate open api specs * increase limit for external_uid to 256	3 months ago
Mihai Doarna	9dbcb3a066	Team: Add user_uid in TeamMemberDTO (#102524 ) * add user_uid in TeamMemberDTO * rewrite sql select string with Sprintf()	3 months ago
Mihai Doarna	bf53d278b7	Revert "Team: Include user UID in GetTeamMembers() output" (#102519 ) Revert "Team: Include user UID in GetTeamMembers() output (#102373)" This reverts commit `e5b6b7b370`.	3 months ago
Mihai Doarna	e5b6b7b370	Team: Include user UID in GetTeamMembers() output (#102373 ) * include user UID in GetTeamMembers() output * move user.uid next to the other user fields * generate openapi specs * remove new line at EOF * fix sql select syntax * fix sql select syntax * fix sql select syntax * fix sql select syntax	3 months ago
Jo	acd13e05ef	Teams: Support team UIDs in APIs (#94011 ) * support team UIDs in APIs * unify middleware logic and add team tests * add UID test to resource permissions * remove unused middleware	9 months ago
Karl Persson	ddee95cb6d	Team: Create permission type for team membership (#92352 ) * Create permission type enum for team and remove usage of dashboard permission type	10 months ago
Ryan McKinley	a0cd89860e	Identity: Add endpoint to get display info for an identifier (#91828 )	11 months ago
Ryan McKinley	ec6c6bd6c3	Identity: Add read-only identity apiserver (#90418 )	11 months ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116 )	1 year ago
Ieva	da1a99d729	Team: Add an endpoint for bulk team membership updates (#87441 ) * add an endpoint for bulk team membership updates * update comment * schema gen * test fix * add swagger parameter definition	1 year ago
Ieva	748b3c855c	Chore: Clean up team membership code (#86914 ) remove unused code, clean up commands	1 year ago
Dan Cech	d76defe517	K8s: Move GrafanaMetaAccessor into grafana-apiserver and remove usage of kinds metadata (#79602 ) * move GrafanaMetaAccessor into pkg/apis, add support for Spec.Title & Spec.Name * K8s: Move GrafanaMetaAccessor (PR into another) (#79728) * access titles * remove title * remove title * remove kinds metadata accessor * remove kinds metadata accessor * fixes * error handling * fix tests --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	1 year ago
Jo	0de66a8099	Authz: Remove use of SignedInUser copy for permission evaluation (#78448 ) * remove use of SignedInUserCopies * add extra safety to not cross assign permissions unwind circular dependency dashboardacl->dashboardaccess fix missing import * correctly set teams for permissions * fix missing inits * nit: check err * exit early for api keys	2 years ago
Jo	259ecb1793	AuthZ: Improve team ID fetching for signedInUser (#78378 ) * improve team ID fetching for signedInUser * remove inner join * rename func * nit: remove extra params * nit: spacing and wrapping	2 years ago
Alexander Zobnin	c0d8a7132e	Teams: Search by team ids (#77730 ) * Teams: Search by team ids * Add tests * Fix tests	2 years ago
Gabriel MABILLE	6ffd4a23de	Team: Support `sort` query param for teams search endpoint (#75622 ) * Teams: Implement backend sorting * Add docs * Make name ordering case insensitive * lint * Fix no lowercasing on memberCount * Add test to double check the filters or correctly OrderBy	2 years ago
Jo	dcf06658eb	Chore: Implement requester in util pkg (#74105 ) implement requester changes that do not impact functionality	2 years ago
Jo	30274a4f88	Auth: Move Team service to SignedInUserInterface (#72674 ) * move SignedInUser to specific file * add primitive interface for signedInUser	2 years ago
Ryan McKinley	c66d5721f7	Kinds: Use apimachinery ObjectMeta for metadata (#68668 )	2 years ago
Ieva	4980b64274	RBAC: Remove legacy ac from authorization middleware (#68898 ) remove legacy AC fallback from RBAC middleware, and some unused auth logic	2 years ago
Ieva	d54fa569ec	Chore: Remove legacy AC checks from team (#68715 ) * removing legacy AC checks from team API handlers * Chore: remove `UserIDFilter` from team queries (#68820) * remove userIDfilter from team queries in favour of RBAC SQL filtering * fix typo * remove redundant tests * remove another unused function * fix failing test	2 years ago
Dan Cech	7572988305	add uid to team table (#66920 ) * add uid to team table * concat * add prefix to transition uids --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Kristin Laemmert	e8b8a9e276	chore: move dashboard_acl models into dashboard service (#62151 )	2 years ago
idafurjes	490a787d9d	Chore: Move tem member models to team pkg (#61294 ) * Chore: Move tem member models to team pkg * Fix test lint	2 years ago
idafurjes	f2ffce4351	Chore: Move team models to models pkg (#61262 ) * Chore: Move team models to models pkg * Fix ACL tests * More ACL tests * Change Id to ID in conflict user command test * Remove team from models * Fix ac test lint	2 years ago
idafurjes	6afad51761	Move SignedInUser to user service and RoleType and Roles to org (#53445 ) * Move SignedInUser to user service and RoleType and Roles to org * Use go naming convention for roles * Fix some imports and leftovers * Fix ldap debug test * Fix lint * Fix lint 2 * Fix lint 3 * Fix type and not needed conversion * Clean up messages in api tests * Clean up api tests 2	3 years ago
Ieva	5dbea9996b	RBAC: Make RBAC action names more consistent (#49730 ) * update action names * correctly retrieve teams for signed in user * remove test * undo swagger changes * undo swagger changes pt2 * add migration from old action names to the new ones * rename from list to read * linting * also update alertign actions * fix migration	3 years ago
Dimitris Sotirakis	605d056136	Security: Sync security changes on main (#45083 ) * * Teams: Appropriately apply user id filter in /api/teams/:id and /api/teams/search * Teams: Ensure that users searching for teams are only able see teams they have access to * Teams: Require teamGuardian admin privileges to list team members * Teams: Prevent org viewers from administering teams * Teams: Add org_id condition to team count query * Teams: clarify permission requirements in teams api docs * Teams: expand scenarios for team search tests * Teams: mock teamGuardian in tests Co-authored-by: Dan Cech <dcech@grafana.com> * remove duplicate WHERE statement * Fix for CVE-2022-21702 (cherry picked from commit 202d7c190082c094bc1dc13f7fe9464746c37f9e) * Lint and test fixes (cherry picked from commit 3e6b67d5504abf4a1d7b8d621f04d062c048e981) * check content type properly (cherry picked from commit 70b4458892bf2f776302720c10d24c9ff34edd98) * basic csrf origin check (cherry picked from commit 3adaa5ff39832364f6390881fb5b42ad47df92e1) * compare origin to host (cherry picked from commit 5443892699e8ed42836bb2b9a44744ff3e970f42) * simplify url parsing (cherry picked from commit b2ffbc9513fed75468628370a48b929d30af2b1d) * check csrf for GET requests, only compare origin (cherry picked from commit 8b81dc12d8f8a1f07852809c5b4d44f0f0b1d709) * parse content type properly (cherry picked from commit 16f76f4902e6f2188bea9606c68b551af186bdc0) * mentioned get in the comment (cherry picked from commit a7e61811ef8ae558ce721e2e3fed04ce7a5a5345) * add content-type: application/json to test HTTP requests * fix pluginproxy test * Fix linter when comparing errors Co-authored-by: Kevin Minehart <kmineh0151@gmail.com> Co-authored-by: Dan Cech <dcech@grafana.com> Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com> Co-authored-by: Serge Zaitsev <serge.zaitsev@grafana.com> Co-authored-by: Vardan Torosyan <vardants@gmail.com>	3 years ago
Gabriel MABILLE	8217d6d206	AccessControl: Change teams permissions page when accesscontrol is enabled (#43971 ) * AccessControl: Change teams permissions page when frontend is hit * Implement frontend changes for group sync * Changing the org/teams/edit permissions Co-authored-by: ievaVasiljeva <ieva.vasiljeva@grafana.com> * Fixing routes Co-authored-by: ievaVasiljeva <ieva.vasiljeva@grafana.com> * Use props straight away no need to go through the state Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com> * Update public/app/features/teams/TeamPages.tsx Co-authored-by: ievaVasiljeva <ieva.vasiljeva@grafana.com> Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com>	3 years ago
Agnès Toulet	22788d1d86	Add an option to hide certain users in the UI (#28942 ) * Add an option to hide certain users in the UI * revert changes for admin users routes * fix sqlstore function name * Improve slice management Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com> * Hidden users: convert slice to map * filter with user logins instead of IDs * put HiddenUsers in Cfg struct * hide hidden users from dashboards/folders permissions list * Update conf/defaults.ini Co-authored-by: Torkel Ödegaard <torkel@grafana.com> * fix params order * fix tests * fix dashboard/folder update with hidden user * add team tests * add dashboard and folder permissions tests * fixes after merge * fix tests * API: add test for org users endpoints * update hidden users management for dashboard / folder permissions * improve dashboard / folder permissions tests * fixes after merge * Guardian: add hidden acl tests * API: add team members tests * fix team sql syntax for postgres * api tests update * fix linter error * fix tests errors after merge Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com> Co-authored-by: Torkel Ödegaard <torkel@grafana.com> Co-authored-by: Leonard Gram <leo@xlson.com>	5 years ago
Arve Knudsen	3d3a7cbba8	Chore: Fix staticcheck issues (#28860 ) * Chore: Fix issues reported by staticcheck Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> * Undo changes Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> * Chore: Fix issues reported by staticcheck Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> * Fix test Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> * Fix test Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>	5 years ago
Marcus Efraimsson	8fd153edb7	API: Restrict anonymous user information access (#18422 ) Existing /api/alert-notifications now requires at least editor access. Existing /api/alert-notifiers now requires at least editor access. New /api/alert-notifications/lookup returns less information than /api/alert-notifications and can be access by any authenticated user. Existing /api/org/users now requires org admin role. New /api/org/users/lookup returns less information than /api/org/users and can be access by users that are org admins, admin in any folder or admin of any team. UserPicker component now uses /api/org/users/lookup instead of /api/org/users. Fixes #17318	6 years ago
Hugo Häggmark	53c74fa2f5	teams: refactor so that you can only delete teams if you are team admin	6 years ago
Leonard Gram	21d3d27452	teams: editors can't remove the last admin from a team.	6 years ago
Leonard Gram	89d4db8eb6	teams: team listing shows only your teams (editors).	6 years ago
Leonard Gram	90e9fda90c	teams: start of team update guardian for editors	6 years ago
Torkel Ödegaard	c03764ff8a	Refactor team pages to react & design change (#12574 ) * Rewriting team pages in react * teams to react progress * teams: getting team by id returns same DTO as search, needed for AvatarUrl * teams: progress on new team pages * fix: team test * listing team members and removing team members now works * teams: team member page now works * ux: fixed adding team member issue * refactoring TeamPicker to conform to react coding styles better * teams: very close to being done with team page rewrite * minor style tweak * ux: polish to team pages * feature: team pages in react & everything working * fix: removed flickering when changing tabs by always rendering PageHeader	7 years ago
Daniel Lee	b9d572bdec	teams: adds some validation to the API	7 years ago
Marcus Efraimsson	e1e0b5f951	teams: use orgId in all team and team member operations (#10862 ) Also fixes issue in org users tests for postgres	7 years ago
Marcus Efraimsson	af34f9977e	Add avatar to team and team members page (#10305 ) * teams: add db migration for email column in teams table * teams: /teams should render index page with a 200 OK * teams: additional backend functionality for team and team members Possibility to save/update email for teams. Possibility to retrive avatar url when searching for teams. Possibility to retrive avatar url when searching for team members. * teams: display team avatar and team member avatars Possibility to save and update email for a team * teams: create team on separate page instead of modal dialog	8 years ago
bergquist	256f7176a2	teams: add team count when searching for team closes #10207	8 years ago
Alexander Zobnin	26281dd9d8	refactor: format files by gofmt	8 years ago
Alexander Zobnin	5d3bfee2f1	refactor: user groups to teams, rename backend files	8 years ago
Alexander Zobnin	d8612380e9	refactor: rename User Groups to Teams	8 years ago
Daniel Lee	01ac3a49bd	dashfolders: fix user group picker + cleanup	8 years ago
Daniel Lee	fff7b706d6	WIP: user group additions	8 years ago
Daniel Lee	0a1df0905e	WIP: add update user group command	8 years ago
Daniel Lee	233cd7af4a	WIP: add user group search	8 years ago
Daniel Lee	af67aea2a9	WIP: add usergroup commands and queries	8 years ago
Daniel Lee	1248728d7f	WIP: rough prototype of dashboard folders Breaks some stuff like selected dash in the search result. In dashboard search, if the user is not searching then the result is returned as a tree structure. No ACL's or user group ux yet.	8 years ago

25 Commits (103652-docs-alert-migration-tool)