379 Commits (3b8477dcda3537323bf04f5b21f825a95ececbca)

Author	SHA1	Message	Date
Scott Lepper	3b8477dcda	Search: fix uid/name filter (#98981) ... [search] fix uid/name filter	5 months ago
Alexander Zobnin	cbb688e910	Zanzana: Remove usage from legacy access control (#98883) ... * Zanzana: Remove usage from legacy access control * remove unused * remove zanzana client from services where it's not used * remove unused metrics * fix linter	5 months ago
maicon	766d645d82	Filewalkwithme/unistore refactor folder service to hit folder apiserver (#98409) ... Refactor folder service to use Unified Storage Signed-off-by: Maicon Costa <maiconscosta@gmail.com> --------- Signed-off-by: Maicon Costa <maiconscosta@gmail.com> Co-authored-by: Stephanie Hingtgen <stephanie.hingtgen@grafana.com>	5 months ago
Nathan Marrs	009d7f42b3	Feature Toggles: Add two test feature toggles to test potential AB test setup (#98844) ... * add two dummy feature toggles to use for testing potential AB testing setup * update betterer * update auto generated files * fix camelcase test case	5 months ago
Stephanie Hingtgen	9ec10be1c7	K8s: Provisioned dashboard support (#98843)	5 months ago
Michael Mandrus	c9d22f06c3	CloudMigrations: Bulk update local resources (#96002) ... * wip * make tests pass * get all tests passing * fixes * some small cleanup * fix test * convert delimiter keys to struct keys * dont execute empty sql statement * remove printlns * fix unit test * a bit more cleanup * whoops	5 months ago
Stephanie Hingtgen	9488bf2915	Dashboards: use service for quotas (#98756)	5 months ago
Stephanie Hingtgen	e195a56c24	Dashboards: move validation to service (#98769)	5 months ago
Stephanie Hingtgen	5ed2a4c624	K8s: Dashboards: Add deletion validation for provisioned dashboards (#98504)	5 months ago
Stephanie Hingtgen	69adb3d25b	Tests: Fix dashboard mock (#98647)	5 months ago
Scott Lepper	f20602ed42	k8s dashboard - fix user parsing/fetching (#98635) ... k8s dashboard - fix user parsing/fetching	5 months ago
Stephanie Hingtgen	58ed8a9ec2	Cloud migration: Refactor get by org ID to dashboard svc (#98646)	5 months ago
Arati R.	6957e1f7b7	Folders: Replace sql query with folder service call when collecting folder tree (#98443) ... * Replace sql query with folder service call when collecting folder tree * Update provider for folder service implementation for wire * Refactor provisioning of oss service in folder permissions test util	5 months ago
Stephanie Hingtgen	c566e6af4e	K8s: Dashboards: Fix search parsing (#98560)	5 months ago
Stephanie Hingtgen	68479d844b	Orgs: Remove dependency on dashboard table for deletion (#98501)	5 months ago
Ryan McKinley	d1d7c0850f	Search: Explain scores (#98316)	5 months ago
Stephanie Hingtgen	7ab2539449	Dashboard tags: add dashboard_uid and org_id (#98500)	5 months ago
Stephanie Hingtgen	b4ab55ae38	K8s: Dashboard spec should not have id (#98336)	5 months ago
Stephanie Hingtgen	5429512779	K8s: Restores: Put behind a feature toggle (#98472)	5 months ago
Stephanie Hingtgen	01b3e56706	K8s Dashboards: Fix Tags (#98417)	5 months ago
Stephanie Hingtgen	03f7a7d89d	K8s: Dashboards: Add search to dashboard service (#98395)	5 months ago
maicon	d2639f6080	Ensure all internal Services are using FolderService and not FolderStore (#98370) ... * Ensure all internal Services are using FolderService and not FolderStore Signed-off-by: Maicon Costa <maiconscosta@gmail.com> --------- Signed-off-by: Maicon Costa <maiconscosta@gmail.com>	5 months ago
Stephanie Hingtgen	b3985a4d37	k8s: Dashboards: allow querying of unistore (#97995)	5 months ago
Stephanie Hingtgen	8f6e9f8ed0	Restores in app platform (#97582)	6 months ago
Ezequiel Victorero	5039725da6	Snapshots: Add RBAC roles for creating and deleting (#96126)	6 months ago
Alexander Zobnin	170e0e1813	Zanzana: List then search implementation (#96705) ... * Zanzana: Search with list * Allow to pass werb into list request * split list search into 2 functions * fix listing resources * remove unused * refactor * remove unused function * Add more logging to reconciler * Fix search for users with access to all resources * fix findFoldersZanzanaList * search for folders as well by default * refactor * use compile for list and search * remove list from client * remove only from client * remove list from interface * run compile once * refactor * refactor * add search tests * fix tests * Fix linter	6 months ago
Alexander Zobnin	1366197522	Zanzana: Search with check server side (#96268) ... * pass zclient into dashboard service * Search then check implementation * Use GetNamespace() for user * remove unused orgID * simple batch check * refactor * add tests * fix batchCheckItem * client implements batch check * use batch check in search * remove unused * remove All field from response * refactor: extract checkNamespace * fix search result uniqueness * comment fix * Apply suggestions from code review Co-authored-by: Karl Persson <kalle.persson@grafana.com> * refactor * cleanup * remove unnecessary check * fix tests * fix protobuf def * Fix query page * fix type --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	6 months ago
Ieva	0a85f15214	RBAC: Remove folder name scope resolver (#96484) ... * remove folder name scope resolver * update test	6 months ago
Karl Persson	f0a5b444e3	Zanzana: generic resource only (#96019) ... * Remove collectors * Remove zanzana search check, we need to rewrite that part to the new schema * Only use generic resource schema and cleanup code we don't want to keep / need to re-write	7 months ago
Jo	9f43724b57	AccessControl: Use UIDs for Resource permissions frontend (#95552) ... * frontend can use uids to set resource permissions * lint * add uids to folder acl * Update public/app/core/components/Select/UserPicker.tsx Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * simplify conditions --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	7 months ago
Ryan McKinley	2f40fd6741	Dashboards: Remove unique name constraints (#90687)	7 months ago
Karl Persson	beaac3c885	Zanzana: Remove model and store initiation from client (#95328) ... * Remove model and store initiation from client	7 months ago
Eric Leijonmarck	9ab064bfc5	Folders: Add admin permissions upon creation of a folder w. SA (#95072) ... * add admin permissions upon creation of a folder w. SA * Update pkg/services/folder/folderimpl/folder.go Co-authored-by: Karl Persson <kalle.persson@grafana.com> * Grant service account permissions for creation of dashboards * Grant service account admin permissions upon creating a datasource * fetch user using the userservice with the userid * Revert "fetch user using the userservice with the userid" This reverts commit 23cba78752. * revert back to original datasource creation --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	7 months ago
Karl Persson	4083b2208e	Zanzana: periodic sync of team members (#94752) ... * Rewrite zanzana collector to fetch all available pages * Register access control as a background service * If zanzana is enabled we run Syncs and start Reconciliation job * Update pkg/services/authz/zanzana/client/client.go Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com> * Use server lock when doing performing reconciliation	8 months ago
Alexander Zobnin	e642e1a804	Zanzana: Pass parent folder for the checks in search queries (#94541) ... * Pass parent folder as a contextual tuple in Check request * Search by listing folders and dashboards * skip dashboards listing if limit reached * remove unused * add some comments * only add ContextualTuples if parent provided * Remove parent relation for dashboards from schema and perform separate checks	8 months ago
Alexander Zobnin	5d724c2482	Zanzana: Initial dashboard search (#93093) ... * Zanzana: Search in a background and compare results * refactor * Search with check * instrument zanzana client * add single_read option * refactor * refactor move check into separate function * Fix tests * refactor * refactor getFindDashboardsFn * add resource type to span attributes * run ListObjects concurrently * Use list and search in less cases * adjust metrics buckets * refactor: move Check and ListObjects to AccessControl implementation * Revert "Fix tests" This reverts commit b0c2f072a2. * refactor: use own types for Check and ListObjects inside accesscontrol package * Fix search scenario with low limit and empty query string * more accurate search with checks * revert * fix linter * Revert "revert" This reverts commit ee5f14eea8. * add search errors metric * fix query performance under some conditions * simplify check strategy * fix pagination * refactor findDashboardsZanzanaList * Iterate over multiple pages while making check request * refactor listUserResources * avoid unnecessary db call * remove unused zclient * Add notes for SkipAccessControlFilter * use more accurate check loop * always use check for search with provided UIDs * rename single_read to zanzana_only_evaluation * refactor * update go workspace * fix linter * don't use deprecated fields * refactor * fail if no org specified * refactor * initial integration tests * Fix tests * fix linter errors * fix linter * Fix tests * review suggestions Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * fix limit * refactor * refactor tests * fix db config in tests * fix migrator (postgres) --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	8 months ago
Arati R.	e399fe6d09	Folders: Set folder creation permission as part of legacy create (#94040) ... * Add folder store to dashboard permissions * Include folder store in annotation scope resolver * Add folder store when initialising library elements * Include folder store in search v2 service initialisation * Include folder store in GetInheritedScopes * Add folder store to folder permissions provider * Include cfg, folder permissions in folder service * Move setting of folder permissions for folder service create method	8 months ago
Arati R.	ed75aea21d	Folders: Export folder store implementation (#93897) ... * Export folder store implementation * Rename folder store * Add folder store as a parameter to folder service * Add folder store to dash service implementation * Fix folder store comments	8 months ago
Jeff Levin	a21a232a8e	Revert read replica POC (#93551) ... * Revert "chore: add replDB to team service (#91799)" This reverts commit c6ae2d7999. * Revert "experiment: use read replica for Get and Find Dashboards (#91706)" This reverts commit 54177ca619. * Revert "QuotaService: refactor to use ReplDB for Get queries (#91333)" This reverts commit 299c142f6a. * Revert "refactor replCfg to look more like plugins/plugin config (#91142)" This reverts commit ac0b4bb34d. * Revert "chore (replstore): fix registration with multiple sql drivers, again (#90990)" This reverts commit daedb358dd. * Revert "Chore (sqlstore): add validation and testing for repl config (#90683)" This reverts commit af19f039b6. * Revert "ReplStore: Add support for round robin load balancing between multiple read replicas (#90530)" This reverts commit 27b52b1507. * Revert "DashboardStore: Use ReplDB and get dashboard quotas from the ReadReplica (#90235)" This reverts commit 8a6107cd35. * Revert "accesscontrol service read replica (#89963)" This reverts commit 77a4869fca. * Revert "Fix: add mapping for the new mysqlRepl driver (#89551)" This reverts commit ab5a079bcc. * Revert "fix: sql instrumentation dual registration error (#89508)" This reverts commit d988f5c3b0. * Revert "Experimental Feature Toggle: databaseReadReplica (#89232)" This reverts commit 50244ed4a1.	8 months ago
Jeff Levin	372d0acec8	Instrument tracing across dashboards (#91937) ... Add tracing across dashboards and accesscontrol	9 months ago
Alexander Akhmetov	b2eeb0dd6e	Alerting: update rule versions on folder move (#88376) ... * Alerting: update rule versions on folder move (#88361) * Add tracing to folder.Move and folder.Update	10 months ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	10 months ago
Ryan McKinley	21d4a4f49e	Auth: use IdentityType from authlib (#91763)	10 months ago
Karl Persson	bcfb66b416	Identity: remove GetTypedID (#91745)	10 months ago
Kristin Laemmert	54177ca619	experiment: use read replica for Get and Find Dashboards (#91706)	10 months ago
Ieva	2e2ddc5c42	Folders: Allow folder editors and admins to create subfolders without any additional permissions (#91215) ... * separate permissions for root level folder creation and subfolder creation * fix tests * fix tests * fix tests * frontend fix * Update pkg/api/accesscontrol.go Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com> * fix frontend when action sets are disabled --------- Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>	10 months ago
Ryan McKinley	be7b1ce2df	Chore: Replace appcontext.User(ctx) with identity.GetRequester(ctx) (#91030)	10 months ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	10 months ago
Ieva	9bb2cf4968	RBAC: Allow omitting default permissions when a new resource is created (#90720) ... * Cfg: Move rbac settings to own struct * Cfg: Add setting to control if resource should generate managed permissions when created * Dashboards: Check if we should generate default permissions when dashboard is created * Folders: Check if we should generate default permissions when folder is created * Datasource: Check if we should generate default permissions when datasource is created * ServiceAccount: Check if we should generate default permissions when service account is created * Cfg: Add option to specify resources for wich we should default seed * ManagedPermissions: Move providers to their own files * Dashboards: Default seed all possible managed permissions if configured * Folders: Default seed all possible managed permissions if configured * Cfg: Remove service account from list * RBAC: Move utility function * remove managed permission settings from the config file examples, change the setting names * remove ini file changes from the PR * fix setting reading * fix linting errors * fix tests * fix wildcard role seeding --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com> Co-authored-by: jguer <me@jguer.space>	10 months ago
Ieva	c2e0952553	Folders: Improve folder move permission checks (#90588) ... * check that a user doesn't have higher plugin access on the destination folder than they have on the source folder when moving folders * Update pkg/services/folder/folderimpl/folder_test.go --------- Co-authored-by: Jo <joao.guerreiro@grafana.com>	10 months ago