grafana

Commit Graph

Author	SHA1	Message	Date
Ieva	163546d40f	RBAC: Remove dashboard guardians pt 1 (#102314 ) * replace the usage of dashboard guardians with calling AC evaluators or checking access in middleware * linting fixes * fix test * more test fixes * remove a todo comment	9 months ago
Will Browne	5b67ae1876	Plugins: Remove support for secrets manager plugins (#101467 ) * remove secrets manager code * remove unused struct * add test toggles back * rollback golden file changes * add missing TestMain * update betterer	9 months ago
Ryan McKinley	ff6a97f1a1	Provisioning: Update APIs in main (#102345 )	9 months ago
Sven Grossmann	b5faf5d9a1	Drilldown: Require `datasources:explore` RBAC action (#101366 ) Drilldown: Require `datasources:explore` acton	10 months ago
Gabriel MABILLE	f3433fd472	RBAC: Remove accessControlOnCall feature toggle (#101222 ) * RBAC: Remove accessControlOnCall feature toggle * Leave the other one in place * Tests * frontend * Readd empty ft to frontend test * Remove legacy RBAC check * Fix test * no need for context * Remove unused variable * Remove unecessary param * remove unecessary param from tests * More tests :D	10 months ago
Andre Pereira	e54149e551	Explore: Move drilldown apps from Explore to a new navbar item "Drilldown" (#100409 ) * Move drilldown apps from Explore to a new navbar item "Drilldown" * Commit make i18n-extract * Update drilldown icon * Added alert to explore with call out to drilldown apps * Add isNew field for nav item which shows a "New!" badge on the navbar and expands it by default * Fix e2e test	10 months ago
Hugo Kiyodi Oshiro	29afe7d2cc	Plugins: Remove managedPluginsInstall feature toggle (#100416 ) * Plugins: Remove managedPluginsInstall feature toggle Co-authored-by: Will Browne <wbrowne@users.noreply.github.com>	10 months ago
Matheus Macabu	3958fb9e0a	CloudMigrations: Introduce RBAC role for migration assistant (#98588 ) * CloudMigrations: delete unused code * CloudMigrations: add access control and protect API + navtree with action * CloudMigrations: register access control roles * CloudMigrations: gate frontend based with access control * CloudMigrations: fix api tests * CloudMigrations: add docs on new actions and roles * CloudMigrations: dont interpolate vars to make it more greppable * CloudMigrations: run prettier	11 months ago
Ryan McKinley	f6ccf976e5	UnifiedSearch: Use ResourceIndex from dashboards apiserver (v0alpha1 only) (#96939 )	1 year ago
Ezequiel Victorero	5039725da6	Snapshots: Add RBAC roles for creating and deleting (#96126 )	1 year ago
Ryan McKinley	68c61514b0	Chore: Remove experimental Storage UI (#96887 )	1 year ago
Juan Cabanas	b8e92aacd2	PublicDashboards: Remove publicDashboards FF (#96578 )	1 year ago
colin-stuart	6abe99efd6	Auth: Passwordless Login Option Using Magic Links (#95436 ) * initial passwordless client * passwordless login page * Working basic e2e flow * Add todo comments * Improve the passwordless login flow * improved passwordless login, backend for passwordless signup * add expiration to emails * update email templates & render username & name fields on signup * improve email templates * change login page text while awaiting passwordless code * fix merge conflicts * use claims.TypeUser * add initial passwordless tests * better error messages * simplified error name * remove completed TODOs * linting & minor test improvements & rename passwordless routes * more linting fixes * move code generation to its own func, use locationService to get query params * fix ampersand in email templates & use passwordless api routes in LoginCtrl * txt emails more closely match html email copy * move passwordless auth behind experimental feature toggle * fix PasswordlessLogin property failing typecheck * make update-workspace * user correct placeholder * Update emails/templates/passwordless_verify_existing_user.txt Co-authored-by: Dan Cech <dcech@grafana.com> * Update emails/templates/passwordless_verify_existing_user.mjml Co-authored-by: Dan Cech <dcech@grafana.com> * Update emails/templates/passwordless_verify_new_user.txt Co-authored-by: Dan Cech <dcech@grafana.com> * Update emails/templates/passwordless_verify_new_user.txt Co-authored-by: Dan Cech <dcech@grafana.com> * Update emails/templates/passwordless_verify_new_user.mjml Co-authored-by: Dan Cech <dcech@grafana.com> * use & in email templates * Update emails/templates/passwordless_verify_existing_user.txt Co-authored-by: Dan Cech <dcech@grafana.com> * remove IP address validation * struct for passwordless settings * revert go.work.sum changes * mock locationService.getSearch in failing test --------- Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com> Co-authored-by: Dan Cech <dcech@grafana.com>	1 year ago
Jo	90d2f4659e	Users: Allow specifying user UIDs in params (#95424 ) * add user ID API translation * add uid to user frontend * use users' UIDs in admin pages * fix ldapSync page * use global user search for user by UID * remove active org filtering * remove orgID params	1 year ago
Scott Lepper	c2fb2dcfbe	wire up unified search from the ui; add basic search support (#94358 ) * wire up search from the ui; add basic search support	1 year ago
Arati R.	2c26053be8	K8s/Folders: Convert additional fields when creating k8s resources (#93395 ) * Add separate folder registration function * Convert to k8s resource directly after legacy create * Use create command when creating folders * Set additional fields when converting to k8s resource * Add created/updated timestamps during conversion * Refactor UnstructuredToLegacyFolderDTO * Return errors when doing k8s conversions	1 year ago
maicon	d1d578785c	Add remaining k8s endpoints for Folders (#93146 ) * Add remaining Folders k8s endpoints Signed-off-by: Maicon Costa <maiconscosta@gmail.com> * Remove duplicated import Signed-off-by: Maicon Costa <maiconscosta@gmail.com> --------- Signed-off-by: Maicon Costa <maiconscosta@gmail.com>	1 year ago
Arati R.	b12a29a1da	K8s: Implement partial folders api with k8s client (#93089 ) * Add kubernetes folder feature toggle * Add kubernetes routes for getting and creating a folder * Add documentation for interacting with k8s folders	1 year ago
Jeff Levin	372d0acec8	Instrument tracing across dashboards (#91937 ) Add tracing across dashboards and accesscontrol	1 year ago
Ryan McKinley	427dad26a2	Swagger: Add a custom swagger/api page (#91785 ) Co-authored-by: Kristian Bremberg <kristian.bremberg@grafana.com>	1 year ago
Alex Khomenko	62494248e3	Restore dashboards: Add RBAC (#90270 ) * Restore dashboards: Add RBAC * Add check to navtree * Prevent non-admins from searching deleted dbs * Add check to the route * Cleanup * Update translations * Update API permissions * Correct permissions * Update warning message * Update translation * Return 401 for deleted query without admin role	1 year ago
Josh Hunt	52ea6236d4	E2C: Set up page route so cloud-migrations doesn't 404 (#89947 )	1 year ago
Laura Benz	34b3dbdbf3	RestoreDashboards: Adjust path (#89233 ) * refactor: change path * fix: page headline * refactor: remove condition	2 years ago
Ezequiel Victorero	42d75ac737	Dashboards: Add feature restore dashboards backend (#83131 ) Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>	2 years ago
Ezequiel Victorero	c9c6445554	Chore: Refactor render via http (#84613 )	2 years ago
Alex Khomenko	44e1bce55a	Feature toggles: Remove dashboardEmbed toggle (#86587 )	2 years ago
Ieva	036f826b87	AuthZ: Further protect admin endpoints (#86285 ) * only users with Grafana Admin role can grant/revoke Grafana Admin role * check permissions to user amdin endpoints globally * allow checking global permissions for service accounts * use a middleware for checking whether the caller is Grafana Admin	2 years ago
Alexander Zobnin	3127566a20	Access control: Use ResolveIdentity() for authorizing in org (#85549 ) * Access control: Use ResolveIdentity() for authorizing in org * Fix tests * Fix middleware tests * Use ResolveIdentity in HasGlobalAccess() function * remove makeTmpUser * Cleanup * Fix linter errors * Fix test build * Remove GetUserPermissionsInOrg()	2 years ago
Karl Persson	ba41954854	Email: trigger email verification flow (#85587 ) * Add email and email_verified to id token if identity is a user * Add endpoint to trigger email verification for user * Add function to clear stored id tokens and use it when email verification is completed	2 years ago
Gilles De Mey	8765c48389	Alerting: Remove legacy alerting (#83671 ) Removes legacy alerting, so long and thanks for all the fish! 🐟 --------- Co-authored-by: Matthew Jacobson <matthew.jacobson@grafana.com> Co-authored-by: Sonia Aguilar <soniaAguilarPeiron@users.noreply.github.com> Co-authored-by: Armand Grillet <armandgrillet@users.noreply.github.com> Co-authored-by: William Wernert <rwwiv@users.noreply.github.com> Co-authored-by: Yuri Tseretyan <yuriy.tseretyan@grafana.com>	2 years ago
Xavi Lacasa	46c26bbd0b	Auth: Fix email verification bypass when using basic authentication (#82914 )	2 years ago
Karl Persson	9e04fd0fb7	AuthToken: Remove client token rotation feature toggle (#82886 ) * Remove usage of client token rotation flag * Remove client token rotation feature toggle	2 years ago
Ryan McKinley	ba3ee60711	K8s: Allow more control over the final openapi results (#81829 )	2 years ago
Misi	5da4021ea0	Auth: Fix routing of SSO setting pages (#81762 ) Fix ac.Parameter	2 years ago
Ryan McKinley	795eb4a8d8	K8s/Snapshots: Add dashboardsnapshot api group (#77667 )	2 years ago
Michael Mandrus	7464ea4346	Feature Toggles: Switch feature toggle admin page over to k8s API (#80854 ) * add handling for legacy and k8s apis to frontend * use backend srv directly not redux * add unit test to make sure the correct apis are being called * require api server flag * fix feature toggle name * ensure both pages work correctly * make consistent with legacy api * implement webhook update * fix unit test * remove old apis and update --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Ryan McKinley	e013cd427c	K8s: Add basic query service (#80325 )	2 years ago
Misi	4577e61ee7	Auth: Improve /admin/authentication permission checks and include new SSO pages (#81183 ) * Move evalAuthSettings to ssoutils * Improve permission check for auth page	2 years ago
Marcus Efraimsson	6768c6c059	Chore: Remove public vars in setting package (#81018 ) Removes the public variable setting.SecretKey plus some other ones. Introduces some new functions for creating setting.Cfg.	2 years ago
Misi	6752a512f3	Auth: Change UI route, add frontend endpoints to api.go (#80671 ) Delete advanced from UI route, fix 404	2 years ago
Matthew Jacobson	c18da48e50	Alerting: Separate overlapping legacy and UA alerting routes (#76517 ) * Separate overlapping legacy and UA alerting routes api/alert-notifiers, alerting/list, and alerting/notifications existed in both legacy and UA. Rename legacy route paths and nav ids to be independent of UA ones.	2 years ago
Torkel Ödegaard	e924627659	Frontend: Reload the browser when backend configuration/assets change (#79057 ) * Detect frontend asset changes * Update * merge main * Frontend: Detect new assets / versions / config changes (#79258) * avoid first check * Updates and add tests * Update * Update * Updated code * refine * use context --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Agnès Toulet	fdaf6e3f2e	PublicDashboards: Add setting to disable the feature (#78894 ) * Replace feature toggle with configuration setting * Fix permission alert * Update documentation * Add back feature toggle * revert unwanted commited changes * fix tests * run prettier * Update SharePublicDashboard.test.tsx * fix linter and frontend tests * Update api.go * Apply docs edit from code review Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> * Update index.md * Update docs/sources/setup-grafana/configure-grafana/feature-toggles/index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * add isPublicDashboardsEnabled + test * fix test * update ff description in registry * move isPublicDashboardsEnabled * revert getConfig() update --------- Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Will Browne	0b511aaace	Plugins: Add backend check for app page role access (#78269 ) * add backend check for roles * tidy * fix tests * incorporate rbac * fix linter * apply PR feedback * add tests * fix logic * add comment * apply PR feedback	2 years ago
Andres Martinez Gotor	1324186f87	Chore: Evaluate if an app is disabled for API requests (#79564 )	2 years ago
Todd Treece	529271d7a8	Perf: Disable core kind registry (#78568 ) Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Jo	0de66a8099	Authz: Remove use of SignedInUser copy for permission evaluation (#78448 ) * remove use of SignedInUserCopies * add extra safety to not cross assign permissions unwind circular dependency dashboardacl->dashboardaccess fix missing import * correctly set teams for permissions * fix missing inits * nit: check err * exit early for api keys	2 years ago
Juan Cabanas	9c5daed336	PublicDashboards: Middleware creation (#77941 )	2 years ago
Gabriel MABILLE	b6b86bb0b3	RBAC: Check `plugins:install` globally (#78438 ) * RBAC: Check plugins:install globally * Add disclamer to the RBACSingleOrganization config option	2 years ago
Ryan McKinley	b8e8d84ef7	Swagger: Show k8s APIs (#78091 )	2 years ago

1 2 3 4 5 ...

802 Commits (a5665c06cf96abe0e782f89dbe940ce95cde69d4)