70 Commits (36ef611cf43d0c12a6fb100b014047f60b30eb52)

Author	SHA1	Message	Date
Alexander Weaver	809aa38103	POST routes to PUT routes (#48828)	4 years ago
Sofia Papagiannaki	bb66c03f9a	Alerting: modify prometheus endpoints for proxying using the datasource UID (#48052) ... * Modify prometheus endpoints to expect the data source UID * Update frontend	4 years ago
Alexander Weaver	0f56462fbe	Alerting: Provisioning message templates (#48665) ... * Generate API for writing templates * Persist templates app logic layer * Validate templates * Extract logic, make set and delete methods * Drop post route for templates * Fix response details, wire up remainder of API * Authorize routes * Mirror some existing tests on new APIs * Generate mock for prov store * Wire up prov store mock, add tests using it * Cover cases for both storage paths * Add happy path tests and fix bugs if file contains no template section * Normalize template content with define statement * Tests for deletion * Fix linter error * Move provenance field to DTO * empty commit * ID to name * Fix in auth too	4 years ago
Sofia Papagiannaki	610247d52a	Alerting: modify ruler endpoints for proxying using the datasource UID (#48046) ... * Modify ruler endpoints to expect the data source UID * Update frontend * Apply suggestion from code review	4 years ago
Sofia Papagiannaki	3e752a0db1	Alerting: modify alertmanager endpoints for proxying using the datasource UID (#47978) ... * Alerting: enable proxying alertmanager calls using the datasource UID * Remove use of datasource ID from the API * Update frontend	4 years ago
Alexander Weaver	735822e48a	Alerting: Add provisioning GET routes for message templates (#48367) ... * Template service * Add GET routes and implement them * Generate mock for persist layer * Unit tests for reading templates * Set up composition root and get integration tests working * Fix prealloc issue * Extract setup boilerplate * Update AuthorizationTest * Rebase and resolve * Fix linter error	4 years ago
Karl Persson	e9a93ebfc9	Access Control: Move access control middlewares to domain package (#48322) ... * Move access control middleware to domain package	4 years ago
Sofia Papagiannaki	54962c2f0c	Alerting: Rename Recipient path parameter to DatasourceID (#47949)	4 years ago
Jean-Philippe Quéméner	388ecb4037	Alerting: Provisioning API - Contact points (#47197)	4 years ago
Alexander Weaver	dde0b93cf1	Alerting: Provisioning API - Notification Policies (#46755) ... * Base-line API for provisioning notification policies * Wire API up, some simple tests * Return provenance status through API * Fix missing call * Transactions * Clarity in package dependencies * Unify receivers in definitions * Fix issue introduced by receiver change * Drop unused internal test implementation * FGAC hooks for provisioning routes * Polish, swap names * Asserting on number of exposed routes * Don't bubble up updated object * Integrate with new concurrency token feature in store * Back out duplicated changes * Remove redundant tests * Regenerate and create unit tests for API layer * Integration tests for auth * Address linter errors * Put route behind toggle * Use alternative store API and fix feature toggle in tests * Fixes, polish * Fix whitespace * Re-kick drone * Rename services to provisioning	4 years ago
Yuriy Tseretyan	c1dbe7617c	fix scope for datasource:query action (#46973)	4 years ago
Yuriy Tseretyan	15e4556c2f	Alerting: update authorization logic to use proper legacy roles when fine-grained access is disabled (#46931) ... * require legacy Editor for post, put, delete endpoints * require user to be signed in on group level because handler that checks that user has role Editor does not check it is signed in	4 years ago
Yuriy Tseretyan	8868848e93	Alerting: rule group update API to ignore deletes of rules user is not authorized to access (#46905) ... * verify that the user has access to all data sources used by the rule that needs to be deleted from the group * if a user is not authorized to access the rule, the rule is removed from the list to delete	4 years ago
Yuriy Tseretyan	acd7be1cb4	Alerting: Change getEvaluatorForAlertRule to checkDatasourcePermissionsForRule (#46887) ... update method getEvaluatorForAlertRule to accept permissions evaluator and exit on the first negative result, which is more effective than returning an evaluator that in fact is a bunch of slices.	4 years ago
Yuriy Tseretyan	2ade8b56dd	Alerting: support fine-grained access control in ruler update API (#45749) ... * require Editor if FGAC is disabled. Otherwise, check `alert.rule:*` + `datasource:query` permissions when user changes rules.	4 years ago
Karl Persson	2727e2503f	Use corrct variable names (#46647)	4 years ago
Yuriy Tseretyan	c42d2e6f5d	Alerting: Add support for fine-grained access to alerting APIs (#46561)	4 years ago
Yuriy Tseretyan	468def0c00	Alerting: fixed roles for fine-grained access control (#46553) ... * move alerting actions to accesscontrol to avoid cycledeps * define new actions and fixed roles for alerting * add folder permission to alert reader role	4 years ago
Yuriy Tseretyan	f7894db99c	Alerting: declare authorization actions, scopes and roles for fine-grained access (#45748) ... * add actions, roles and route mapping for rule permission * add instance\notification actions * do not declare alerting roles if no feature flag is set (temporary)	4 years ago
Yuriy Tseretyan	ddfe2dce74	Alerting: Split grafana and lotex routes (#44742) ... * split Lotex and Grafana routes * update template to use authorize function for every route	4 years ago