3536 Commits (41e4b95b51a00f44facbde969efe9a6229107a54)

Author	SHA1	Message	Date
Michael Mandrus	456939bac4	Feature Toggles: Remove use of boolPtr in FeatureFlag struct (#79550) ... * remove bool ptr and update docs * fix silly thing * merge main * maybe this time --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Will Browne	0b511aaace	Plugins: Add backend check for app page role access (#78269) ... * add backend check for roles * tidy * fix tests * incorporate rbac * fix linter * apply PR feedback * add tests * fix logic * add comment * apply PR feedback	2 years ago
Ezequiel Victorero	864d91ed3e	Export: Remove no-store headers in pdf and image previews (#78844)	2 years ago
Sofia Papagiannaki	6d9c651b74	Chore: Remove redundant benchmarks (#79626)	2 years ago
Eric Leijonmarck	57ca8fa368	Anonymous: Add device limits to stats (#79494) ... * add device limits * feat: tabs the anon and session stats w. highlight	2 years ago
Sofia Papagiannaki	d89a8a3a82	Nested Folders: Fix /api/folders pagination (#79447) ... * Nested Folders: Fix /api/folders pagination We used to check access to the root folders after fetching them from the DB with pagination. This fix splits logic for fetching folders in: - fetching subfolders - fetching root folders and refactors the query for the latter so that is filters by folders with permissions * Add tests * Update benchmarks	2 years ago
Andres Martinez Gotor	1324186f87	Chore: Evaluate if an app is disabled for API requests (#79564)	2 years ago
Misi	ce1450d4d3	Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) ... * Configure SkipOrgRoleSync from OAuthInfo * Remove skipOrgRoleSync from socialbase and connectors * Add test to socialimpl.ProvideService * Deprecate AuthSettings' fields * clean up misleading init of frontendsettings.Auth	2 years ago
Will Browne	ce8fd14f1f	Plugins: Make renderer service load renderer plugin (#77854) ... * rendering service loads renderer plugin * update naming * tidy * apply PR feedback * fix missing feature manager * fix step * set plugin	2 years ago
Karl Persson	a7a51bf2d8	Analytics: Return empty analytic settings for users that are not signed in (#79515) ... Return empty analytic settings for users that are not signed in	2 years ago
Ben Sully	315100e2e3	Plugins: Add Grafana config to app plugin context (#79439)	2 years ago
Jo	3647ba7360	Anonymous: Add configurable device limit (#79265) ... * Anonymous: Add device limiter * break auth if limit reached * fix typo * refactored const to make it clearer with expiration * anon device limit for config --------- Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>	2 years ago
Ieva	19ad788333	RBAC: change annotation scopes back (#79330) ... Change the annotation scopes back to what they were	2 years ago
Ryan McKinley	f69516bf47	K8s: Add resource type helper to avoid so many hardcoded names (#79344)	2 years ago
Gábor Farkas	5b4da3a7dc	mssql: prepare logs-handling for decouple-datasource changes (#79214) ... mssql: refactor logs-handling	2 years ago
Mihai Doarna	bff2ac3627	Auth: check that oauthProvider is not nil in Logout() func (#79271) ... check that oauthProvider is not nil	2 years ago
Misi	50f4e78a39	Auth: Use SSO settings service to load social connectors + refactor (#79005) ... * Refactor to prevent cyclic dependencies * Move list authorization to the API layer * Init connectors using the SSO settings service in case the ssoSettingsApi feature toggle is enabled * wip, need to handle the cyclic dep * Remove cyclic dependency * Align tests + refactor * Move back OAuthInfo to social * Delete pkg/login/social/constants * Move reloadable registration to the social providers * Rename connectors.Error to connectors.SocialError	2 years ago
Kat Yang	31fb38723d	Chore: Remove FolderID from DTO Folder (#78420) ... * Chore: Remove FolderID from DTO Folder * chore: add OrgID field to an instance of SaveDashboardCommand * chore: add another OrgID to pair with the FolderUID: * chore: add OrgId to Folder struct and expectedParentOrgIDs to testCase struct, unsure if last part is necessary * Fix folder test, add expected orgID * chore: regen specs --------- Co-authored-by: Ida Furjesova <ida.furjesova@grafana.com>	2 years ago
idafurjes	550746be71	Fix capitalising Folder structs (#79207) ... * Fix capitalising Folder structs * Add swagger and fix api dashboard test * Add swagger files with bingo installed	2 years ago
Todd Treece	2a2a132c61	K8s: Refactor metrics to share k8s registry (#79106)	2 years ago
Todd Treece	ea36336c0a	Chore: Ensure BuildVersion is set when using CDN (#79169)	2 years ago
Alexander Zobnin	959ebf82da	Folders: Show dashboards and folders with directly assigned permissions in "Shared" folder (#78465) ... * Folders: Show folders user has access to at the root level * Refactor * Refactor * Hide parent folders user has no access to * Skip expensive computation if possible * Fix tests * Fix potential nil access * Fix duplicated folders * Fix linter error * Fix querying folders if no managed permissions set * Update benchmark * Add special shared with me folder and fetch available non-root folders on demand * Fix parents query * Improve db query for folders * Reset benchmark changes * Fix permissions for shared with me folder * Simplify dedup * Add option to include shared folder permission to user's permissions * Fix nil UID * Remove duplicated folders from shared list * Folders: Fix fetching empty folder * Nested folders: Show dashboards with directly assigned permissions * Fix slow dashboards fetch * Refactor * Fix cycle dependencies * Move shared folder to models * Fix shared folder links * Refactor * Use feature flag for permissions * Use feature flag * Review comments * Expose shared folder UID through frontend settings * Add frontend type for sharedWithMeFolderUID option * Refactor: apply review suggestions * Fix parent uid for shared folder * Fix listing shared dashboards for users with access to all folders * Prevent creating folder with "shared" UID * Add tests for shared folders * Add test for shared dashboards * Fix linter * Add metrics for shared with me folder * Add metrics for shared with me dashboards * Fix tests * Tests: add metrics as a dependency * Fix access control metadata for shared with me folder * Use constant for shared with me * Optimize parent folders access check, fetch all folders in one query. * Use labels for metrics	2 years ago
Dan Cech	647f576359	Server: Automatically generate a self-signed TLS cert if needed (#78243) ... generate a self-signed cert when running in https or http2 mode without a provided cert	2 years ago
Todd Treece	7e2aad1d01	Revert "K8s: Refactor metrics to share k8s registry (#77957)" (#79079) ... This reverts commit 38bc41651a.	2 years ago
Alexander Zobnin	043096d652	Team LBAC: Limit access to data source (#78376) ... * Team LBAC: Limit access to data source * Fix tests	2 years ago
Torkel Ödegaard	ed128ea964	Frontend: Foundations for multi tenant frontend (#78815) ... * Frontend: Foundations for multi tenant frontend * improve manifest parsing for multi-tenant frontend (#78876) * add test * add test * ?? * Updates * Added cache * test cleanup * lint * fix test * fix error templates * cleanup * remove copy * revert changes to list testdata * comment cleanup * prepare integration tests * Remove integrety --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Todd Treece	38bc41651a	K8s: Refactor metrics to share k8s registry (#77957) ... Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Gabriel MABILLE	5b70130e6c	Plugins: Rename `externalServiceAuthentication` to `iam` (#78686) ... Plugins: Rename externalServiceAuthentication to iam	2 years ago
Sofia Papagiannaki	6d4625ad52	Alerting: Fix deleting rules in a folder with matching UID in another organization (#78258) ... * Remove usage of obsolete function for deleting alert rules under folder * Apply suggestion from code review * Update tests	2 years ago
Ieva	c354c7bfff	RBAC: Update fixed annotation roles (#78756) ... * update fixed annotation roles if FlagAnnotationPermissionUpdate is enabled * add dashboard type scope back in the fixed roles to make the migration easier	2 years ago
Gabriel MABILLE	ef2c79d22a	Chore: use errutil for pluginRepo errors (#78647) ... * Chore: use errutil for pluginRepo errors * Update pkg/util/errutil/status.go * Use errutil helper functions Co-Authored-By: Marcus Efraimsson <marcus.efraimsson@gmail.com> * Forgot the log level * Use entity --------- Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com>	2 years ago
Eric Leijonmarck	59bdff0280	Auth: Add anonymous users view and stats (#78685) ... * Add anonymous stats and user table - anonymous users users page - add feature toggle `anonymousAccess` - remove check for enterprise for `Device-Id` header in request - add anonusers/device count to stats * promise all, review comments * make use of promise all settled * refactoring: devices instead of users * review comments, moved countdevices to httpserver * fakeAnonService for tests and generate openapi spec * do not commit openapi3 and api-merged * add openapi * Apply suggestions from code review Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com> * formatin * precise anon devices to avoid confusion --------- Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com> Co-authored-by: jguer <me@jguer.space>	2 years ago
venkatbvc	e152323a33	Auth: Split signout_redirect_url into per provider settings (#75269) ... * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * Update docs/sources/setup-grafana/configure-security/configure-authentication/grafana/index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * update docs * update devenvs * add missing struct tag --------- Co-authored-by: Rao, B V Chalapathi <b_v_chalapathi.rao@nokia.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: jguer <me@jguer.space>	2 years ago
Ieva	d201d3f7db	RBAC: correctly fetch nested folder metadata (#78655) ... fix a bug with nested folder metadata	2 years ago
Todd Treece	529271d7a8	Perf: Disable core kind registry (#78568) ... Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Gabriel MABILLE	24a6ee4a91	Plugins: Check installer's permissions include plugins' permissions (#78211) ... * Check installer perm * Failed eval better output * Switch fetching json data in the repo * Comment * Account for feedback * Mv single_organization config option * Inline error check * Starting to replace errors not to have to do the management in two places * Continue error translation * Cover ErrChecksumMismatch * Refactor a bit * Lint. Tab * log instead of erroring out * Nit. * Revert change on kinds * revert file again * Fix tests * Match core plugin error status code * Skip permission check for Grafana Admin * Use errutil templates * Use errutil templating * Inline * Test templating * revert error changes * Remove isGrafanaAdmin skip * Feature toggle check * Small refactor on hasPluginRequestedPermissions * Add test * Imports * Post install check * change log messages so that they make sense * Cover no scope case * Inline * Nit. * Fix test	2 years ago
Jo	7d559bc69a	AuthProxy: Do not allow sessions to be assigned with other methods (#78602) ... do not allow login token with other methods	2 years ago
Misi	7128415529	Auth: Add more context to logs around token rotation, revocation (#78600) ... Add more context to logs around token rotation, revocation Co-authored-by: Karl Persson <kalle.persson@grafana.com>	2 years ago
Ieva	778841cabe	Annotations: Remove dashboard permission checks for annotations (#78352) ... remove checks for access to dashboard if FlagAnnotationPermissionUpdate is enabled	2 years ago
Jo	0de66a8099	Authz: Remove use of SignedInUser copy for permission evaluation (#78448) ... * remove use of SignedInUserCopies * add extra safety to not cross assign permissions unwind circular dependency dashboardacl->dashboardaccess fix missing import * correctly set teams for permissions * fix missing inits * nit: check err * exit early for api keys	2 years ago
Juan Cabanas	9c5daed336	PublicDashboards: Middleware creation (#77941)	2 years ago
Gabriel MABILLE	b6b86bb0b3	RBAC: Check `plugins:install` globally (#78438) ... * RBAC: Check plugins:install globally * Add disclamer to the RBACSingleOrganization config option	2 years ago
Karl Persson	1eb19befaa	Login: refactor auth info package (#78459) ... * Remove unused stats and metrics * No longer collect metrics * Remove unused dependency * Move database from sub package	2 years ago
Karl Persson	d42201dbf4	Login: remove unused function (#78442) ... * Move test to the db so we test the queries and not just testing the mock * Remove unused function and dependencies * Remove unused functions from the database * Add some integration tests	2 years ago
Kat Yang	2f2ce3edbb	Chore: Deprecate ID from Folder (#78281) ... * Chore: Deprecate ID from Folder * chore: add more linter comments * chore: add missing lint comment	2 years ago
Ashley Harrison	7404ed66f6	Chore: Remove `navAdminSubsections` toggle (#78179) ... * remove navAdminSubsections toggle * missed one!	2 years ago
Ieva	2a5547e1b5	Annotations: Update annotation scope resolver to resolve annotation scopes to dash and folder scopes (#78222) ... * update annotation scope resolver to resolve dashboard annotation scopes to dash and folder scopes * Update annotations.go remove unwanted changes * remove unwanted change * use switch statement	2 years ago
Kat Yang	2d09bac2b8	Chore: Deprecate FolderIDs only used by Swagger (#78219)	2 years ago
Ieva	b0448b92e5	Dashboards: Allow updating a dashboard if the user doesn't have access to the parent folder (#78075) ... * change where folder checks are done for dash creation/updates * add test for folder not being found * test fixes * more test fixes * add nlint directive to where folder IDs are used * fix bad merge * fix test	2 years ago
Ieva	2c73f15839	Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130" (#78203) ... Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130 (#78198)" This reverts commit 8057b9298d.	2 years ago