76 Commits (7ea0fab6065f2b6cdf604cd83ee03da0c9237cdf)

Author	SHA1	Message	Date
Mihai Doarna	9dbcb3a066	Team: Add user_uid in TeamMemberDTO (#102524) ... * add user_uid in TeamMemberDTO * rewrite sql select string with Sprintf()	2 months ago
Mihai Doarna	bf53d278b7	Revert "Team: Include user UID in GetTeamMembers() output" (#102519) ... Revert "Team: Include user UID in GetTeamMembers() output (#102373)" This reverts commit e5b6b7b370.	2 months ago
Mihai Doarna	e5b6b7b370	Team: Include user UID in GetTeamMembers() output (#102373) ... * include user UID in GetTeamMembers() output * move user.uid next to the other user fields * generate openapi specs * remove new line at EOF * fix sql select syntax * fix sql select syntax * fix sql select syntax * fix sql select syntax	2 months ago
Peter Štibraný	f3df64b7f4	Pass BOOL values as real types (int/bool) instead of strings to SQL parameters. (#101961) ... * Pass BOOL values as real types (int/bool) instead of strings to SQL parameters. Fixes following integration tests when running with Spanner: * TestIntegrationDataAccess * GetDataSourcesByType/Get_prunable_data_sources * TestIntegrationUserAuthToken: * expires_correctly * can_properly_rotate_tokens * keeps_prev_token_valid_for_1_minute_after_it_is_confirmed * Fix more places where "true" or "false" string was passed as query parameter instead of bool value. * Removed unit test because it brought unwanted dependencies on xorm into multiple modules.	3 months ago
Ryan McKinley	680e6bc1f8	Authlib: Use types package rather than claims (#99243)	4 months ago
Alexander Zobnin	cbb688e910	Zanzana: Remove usage from legacy access control (#98883) ... * Zanzana: Remove usage from legacy access control * remove unused * remove zanzana client from services where it's not used * remove unused metrics * fix linter	5 months ago
Eric Leijonmarck	83d050ee1c	LBAC for datasources: Adds UID to LBAC rules (#96522) ... * swagger * update with deprecation notice * adding caching for teams	6 months ago
Jo	4452d0932a	Users: Fix potential panics on UID translation (#95794) ... fix potential panics on UID translation	7 months ago
Jo	2b867d9850	AccessControl: Resource permission translator (#95423) ... * Standardize Resource Translator in options * Add resource UID translator for resource permissions * fix comments * fix comments	7 months ago
Jo	9eea0e99fc	Chore: Use UIDs as identifiers for teams frontend (#94345) ... * Team frontend now uses UIDs as identifiers. Safe to revert	8 months ago
Jo	acd13e05ef	Teams: Support team UIDs in APIs (#94011) ... * support team UIDs in APIs * unify middleware logic and add team tests * add UID test to resource permissions * remove unused middleware	8 months ago
Jeff Levin	a21a232a8e	Revert read replica POC (#93551) ... * Revert "chore: add replDB to team service (#91799)" This reverts commit c6ae2d7999. * Revert "experiment: use read replica for Get and Find Dashboards (#91706)" This reverts commit 54177ca619. * Revert "QuotaService: refactor to use ReplDB for Get queries (#91333)" This reverts commit 299c142f6a. * Revert "refactor replCfg to look more like plugins/plugin config (#91142)" This reverts commit ac0b4bb34d. * Revert "chore (replstore): fix registration with multiple sql drivers, again (#90990)" This reverts commit daedb358dd. * Revert "Chore (sqlstore): add validation and testing for repl config (#90683)" This reverts commit af19f039b6. * Revert "ReplStore: Add support for round robin load balancing between multiple read replicas (#90530)" This reverts commit 27b52b1507. * Revert "DashboardStore: Use ReplDB and get dashboard quotas from the ReadReplica (#90235)" This reverts commit 8a6107cd35. * Revert "accesscontrol service read replica (#89963)" This reverts commit 77a4869fca. * Revert "Fix: add mapping for the new mysqlRepl driver (#89551)" This reverts commit ab5a079bcc. * Revert "fix: sql instrumentation dual registration error (#89508)" This reverts commit d988f5c3b0. * Revert "Experimental Feature Toggle: databaseReadReplica (#89232)" This reverts commit 50244ed4a1.	8 months ago
Karl Persson	ddee95cb6d	Team: Create permission type for team membership (#92352) ... * Create permission type enum for team and remove usage of dashboard permission type	9 months ago
Kristin Laemmert	c6ae2d7999	chore: add replDB to team service (#91799)	10 months ago
Ryan McKinley	a0cd89860e	Identity: Add endpoint to get display info for an identifier (#91828)	10 months ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	10 months ago
Ryan McKinley	21d4a4f49e	Auth: use IdentityType from authlib (#91763)	10 months ago
Karl Persson	bcfb66b416	Identity: remove GetTypedID (#91745)	10 months ago
Kristin Laemmert	299c142f6a	QuotaService: refactor to use ReplDB for Get queries (#91333) ... * Feature (quota service): Use ReplDB for quota service Gets This adds the replDB to the quota service, as well as some more test helper functions to simplify updating tests. My intent is that the helper functions can be removed when this is fully rolled out (or not) and we're consistently using the ReplDB interface (or not!) * test updates	10 months ago
Ryan McKinley	ec6c6bd6c3	Identity: Add read-only identity apiserver (#90418)	10 months ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	10 months ago
Alexander Zobnin	87d86e81ce	Zanzana: Evaluate permissions alongside with RBAC engine (#90064) ... * Zanzana: Evaluate permissions if feature flag enabled * Fix tests * adjust logs * fix spelling * remove unused * only evaluate implemented resources * refactor	11 months ago
Karl Persson	f18da6f4dc	User+team: remove startup migration for uid (#89953) ... * Remove migration that is performed on startup	11 months ago
Jeff Levin	cfe8317d45	Add auth spans and remove deduplication code for scopes (#89804) ... Adds more spans for timing in accesscontrol and remove permission deduplicating code after benchmarking --------- Signed-off-by: Dave Henderson <dave.henderson@grafana.com> Co-authored-by: Dave Henderson <dave.henderson@grafana.com> Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	11 months ago
Kristin Laemmert	cc1d3d0f8d	Chore(TeamService): remove extra Transaction from getTeamMember (#89308) ... remove extra Transaction from getTeamMember	12 months ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116)	12 months ago
Ieva	da1a99d729	Team: Add an endpoint for bulk team membership updates (#87441) ... * add an endpoint for bulk team membership updates * update comment * schema gen * test fix * add swagger parameter definition	1 year ago
Ieva	167151b211	Chore: Remove use of deprecated method in AC code (#87541) ... * switch from using cfg to using featuremgmt for checking a feature toggle in AC code * merge test fixes	1 year ago
Karl Persson	a2cba3d0b5	User: Add tracing (#87028) ... * Inject tracer in tests * Annotate with traces Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	1 year ago
Ieva	cee713e34c	Chore: Add tracing to team service (#86999) ... * add tracing to team service * another test fix * pass in context for team creation and membership checking	1 year ago
Ieva	748b3c855c	Chore: Clean up team membership code (#86914) ... remove unused code, clean up commands	1 year ago
Ieva	8028d1c3e1	Chore: Update tests to use team membership hooks (#86846) ... * update tests to use team membership hooks * linting	1 year ago
Serge Zaitsev	522a98c126	Chore: Make Cfg field private in SQLStore (#85593) ... * make cfg private in sqlstore * fix db init in tests * fix case * fix folder test init * fix imports * make another Cfg private * remove another Cfg * remove unused variable * use store cfg, it has side-effects * fix mutated cfg in tests	1 year ago
Serge Zaitsev	faa1244518	Chore: Replace sqlstore with db interface (#85366) ... * replace sqlstore with db interface in a few packages * remove from stats * remove sqlstore in admin test * remove sqlstore from api plugin tests * fix another createUser * remove sqlstore in publicdashboards * remove sqlstore from orgs * clean up orguser test * more clean up in sso * clean up service accounts * further cleanup * more cleanup in accesscontrol * last cleanup in accesscontrol * clean up teams * more removals * split cfg from db in testenv * few remaining fixes * fix test with bus * pass cfg for testing inside db as an option * set query retries when no opts provided * revert golden test data * rebase and rollback	1 year ago
Gabriel MABILLE	8d9921a5ba	RBAC: Fix delete team permissions on team delete (#83442) ... * RBAC: Remove team permissions on delete * Remove unecessary deletes from store function * Nit on mock * Add test to the database * Nit on comment * Add another test to check that other permissions remain	1 year ago
Jo	cc3b088b6c	Teams: Fix missing context in team service (#83327) ... fix missing context in team service	1 year ago
Karl Persson	1315c67c8b	Team/User: UID migrations (#82298) ... * Add user uid migration to run on every startup to protect against empty values in a upgrade downgrade scenario * Add team uid migration to run on every startup to protect against empty values in a upgrade downgrade scenario * Run team uid migration	1 year ago
Dan Cech	790e1feb93	Chore: Update test database initialization (#81673) ... * streamline initialization of test databases, support on-disk sqlite test db * clean up test databases * introduce testsuite helper * use testsuite everywhere we use a test db * update documentation * improve error handling * disable entity integration test until we can figure out locking error	1 year ago
Marcus Efraimsson	6768c6c059	Chore: Remove public vars in setting package (#81018) ... Removes the public variable setting.SecretKey plus some other ones. Introduces some new functions for creating setting.Cfg.	1 year ago
Dan Cech	d76defe517	K8s: Move GrafanaMetaAccessor into grafana-apiserver and remove usage of kinds metadata (#79602) ... * move GrafanaMetaAccessor into pkg/apis, add support for Spec.Title & Spec.Name * K8s: Move GrafanaMetaAccessor (PR into another) (#79728) * access titles * remove title * remove title * remove kinds metadata accessor * remove kinds metadata accessor * fixes * error handling * fix tests --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	1 year ago
Jo	0de66a8099	Authz: Remove use of SignedInUser copy for permission evaluation (#78448) ... * remove use of SignedInUserCopies * add extra safety to not cross assign permissions unwind circular dependency dashboardacl->dashboardaccess fix missing import * correctly set teams for permissions * fix missing inits * nit: check err * exit early for api keys	2 years ago
Jo	259ecb1793	AuthZ: Improve team ID fetching for signedInUser (#78378) ... * improve team ID fetching for signedInUser * remove inner join * rename func * nit: remove extra params * nit: spacing and wrapping	2 years ago
Ieva	2c73f15839	Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130" (#78203) ... Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130 (#78198)" This reverts commit 8057b9298d.	2 years ago
Eric Leijonmarck	8057b9298d	Revert "RBAC: remove dashboard ACL logic from dash store, service #78130 (#78198) ... Revert "RBAC: remove dashboard ACL logic from dash store and service (#78130)" This reverts commit dd54931147.	2 years ago
Ieva	dd54931147	RBAC: remove dashboard ACL logic from dash store and service (#78130) ... remove dashboard ACL logic from dash store and service	2 years ago
Alexander Zobnin	c0d8a7132e	Teams: Search by team ids (#77730) ... * Teams: Search by team ids * Add tests * Fix tests	2 years ago
Dan Cech	db6035a843	Chore: update kind annotation names to grafana.app/* (#77401) ... * update kind annotation names to grafana.app/*	2 years ago
Jo	466f8a1f5a	Teams: Move team API to own service (#76347) ... * move team API to its own service * remove uneeded import * reshare pref api logic	2 years ago
Jo	79b2974215	Teams: Allow Services to register deletes (#76325) ... * add team RegisterDelete * fix-docs	2 years ago
Gabriel MABILLE	6ffd4a23de	Team: Support `sort` query param for teams search endpoint (#75622) ... * Teams: Implement backend sorting * Add docs * Make name ordering case insensitive * lint * Fix no lowercasing on memberCount * Add test to double check the filters or correctly OrderBy	2 years ago