3414 Commits (ad432108e66cc9fa2c2eb232c1a888088122ee03)

Author	SHA1	Message	Date
Yuriy Tseretyan	8868848e93	Alerting: rule group update API to ignore deletes of rules user is not authorized to access (#46905) ... * verify that the user has access to all data sources used by the rule that needs to be deleted from the group * if a user is not authorized to access the rule, the rule is removed from the list to delete	3 years ago
Gabriel MABILLE	9dc06cd21f	simplify bulkAssignRoles (#46891)	3 years ago
Kat Yang	39f14a2ec2	Chore: Remove x from login attempt (#46853)	3 years ago
kay delaney	8329cd59f6	LibraryPanels: Increase max description length to 2048 chars (#46601)	3 years ago
Karl Persson	cac6936015	Access control: Change data source permissions to be based on UID (#46741) ... * Add ResourceAttribute * Add ResourceAttribute option * Set ResourceAttribute option * Change resolvers to return uid based scopes * update swagger to correct scope * use ResourceAttribute for endpoint scope * bump role version * Add support for different attributes for access control metadata * evaluate data source metadata based on uid * Fix test * uncomment benchmarks * Use resourceID * use evaluator for access control metadata * update comment * Set default permissions based on uid * Add attribute to accesscontrol filter * validate that scopes has correct attribute * lint * Update comment * remove attribute parameter and extend prefix * refactor to use scope prefix * Get metadata with prefix * fix test * fix comparision * remove unused type * fix attribute index * fix typo * restructure logic * Get metadata by uid * fix imports Co-authored-by: jguer <joao.guerreiro@grafana.com>	3 years ago
Gabriel MABILLE	3440e7c8f7	AccessControl: Fix locked role picker in orgs/edit page (#46539) ... * AccessControl: Fix locked role picker in orgs/edit page * Use correct org when computing metadata	3 years ago
Ezequiel Victorero	c5f295b5b3	Access Control: adding FGAC validation to mass delete annotation endpoint (#46846) ... * Access Control: adding FGAC validation to mass delete annotation endpoint	3 years ago
Yuriy Tseretyan	60d4cd80bf	Alerting: update DeleteAlertRuleByUID to accept many UID (#46890)	3 years ago
Selene	d57c94fb6a	Chore: Remove bus from folder service (#46840) ... * Remove bus from folder service * Fix tests	3 years ago
Yuriy Tseretyan	4ee48c2e77	Alerting: Update GetRuleGroupAlertRules to accept optional rule group (#46889) ... * rename GetRuleGroupAlertRules to GetAlertRules * make rule group optional in GetAlertRulesQuery * simplify FakeStore. the current structure did not support optional rule group	3 years ago
Yuriy Tseretyan	acd7be1cb4	Alerting: Change getEvaluatorForAlertRule to checkDatasourcePermissionsForRule (#46887) ... update method getEvaluatorForAlertRule to accept permissions evaluator and exit on the first negative result, which is more effective than returning an evaluator that in fact is a bunch of slices.	3 years ago
Joe Blubaugh	481a68cbf5	Unified Alerting: Make log message follow codebase convention. (#46881) ... 1. Keep log lines lower case. 2. The key-value pair arguments are not format argument for the string. 3. Always use the "err" key.	3 years ago
idafurjes	77976ea810	Add fakes for db interface (#46885)	3 years ago
Joe Blubaugh	c5b39dd3cd	Unified Alerting, Issue 41156: Clean up expired silences. (#46740) ... Expired silences older than the retention period were not being cleaned up. The root problem was that notifier.Alertmanager overrides the Prometheus alert manager's silence maintenance function and was not calling Silences.GC() in the overriden function.	3 years ago
Jean-Philippe Quéméner	a80f04c949	Alerting: add collision safe update function for alertmanager configurations (#46692) ... * Alerting: add collision safe update function for alertmanager configurations * fix typo * use bootstrap func for tests * move hash calculation to store * remove icons lol * remove removed field	3 years ago
Gabriel MABILLE	ff3c1e3144	AccessControl: Handle ':' in attribute resolution (#46742) ... * AccessControl: Handle ':' in attribute resolution * Simplify based on assumption that prefixes will have maximum 2 parts	3 years ago
Kat Yang	884c2351d8	Chore: Remove x from org (#46851)	3 years ago
Karl Persson	ee9badecdf	Access Control: Add test flag to enable access control (#46780) ... * Add feature flags options to test db	3 years ago
idafurjes	5db1a2e804	Add DB interface (#46832)	3 years ago
Eng Zer Jun	b56848f006	test: use `T.TempDir` to create temporary test directory (#44947) ... The directory created by `T.TempDir` is automatically removed when the test and all its subtests complete. Reference: https://pkg.go.dev/testing#T.TempDir Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>	3 years ago
Marcus Efraimsson	be7bcbf94e	Chore: Add tests for plugin settings sqlstore (#46792) ... Follow up of #46777 adding tests for plugin settings in sqlstore package.	3 years ago
Selene	b2af18f129	Chore: Remove bus from dashboard service (#46829) ... * Move DeleteDashboard funtion into dashboards store service, remove bus and update tests * Remove bus from folder service and update more tests * Fix mock	3 years ago
Karl Persson	bfb03d779d	Access Control: Correctly check for id suffix (#46824) ... * Correctly check for id suffix	3 years ago
Karl Persson	faf4a3f751	Access Control: Rename global users scope (#46794) ... * Rename scope from global:users to global.users to match scope convention	3 years ago
ying-jeanne	adc0cbf176	remove global variable in annotation (#46746) ... * remove global varaible in annotation * remove todo * replace intransaction with withdbtransaction * fix typo	3 years ago
Serge Zaitsev	4ce7978cd8	Chore: Remove bus from notification service (#46813) ... * Chore: Remove bus from notification service * fix signature * fix function signature in tests	3 years ago
Yuriy Tseretyan	2ade8b56dd	Alerting: support fine-grained access control in ruler update API (#45749) ... * require Editor if FGAC is disabled. Otherwise, check `alert.rule:*` + `datasource:query` permissions when user changes rules.	3 years ago
Serge Zaitsev	9315ddd57c	Chore: Remove bus from oauthtoken (#46811)	3 years ago
Serge Zaitsev	cce46a6349	Chore: Remove bus from live package (#46803)	3 years ago
Ezequiel Victorero	c717320942	Adding FGAC annotations validation for creation and deletion (#46736) ... Access Control: Adding FGAC annotations validation for creation and deletion Co-authored-by: IevaVasiljeva <ieva.vasiljeva@grafana.com>	3 years ago
Karl Persson	7ab1ef8d6e	Access Control: Support other attributes than id for resource permissions (#46727) ... * Add option to set ResourceAttribute for a permissions service * Use prefix in access control sql filter to parse scopes * Use prefix in access control metadata to check access	3 years ago
Emil Tullstedt	0e5ac29763	Data sources: Grant creator edit permissions to data source by default (#46168) ... * Data sources: Sent user ID when creating data source * Data sources: Grant a data source creator edit permissions * Use edit permisison and only append if user id is in command Co-authored-by: Karl Persson <kalle.persson@grafana.com>	3 years ago
ying-jeanne	0d5a6c2194	remove bus from search and avoid import cycle (#46789) ... * fix the import cicle * fix some unittest * fix removal bus from search	3 years ago
Marcus Efraimsson	1044585b50	Plugins: Fix problematic query (#46777) ... Fixes mysql error "sql: expected 0 arguments, got 1" introduced via #46283	3 years ago
Serge Zaitsev	df465ccad3	Chore: Remove bus from thumbs service (#46772)	3 years ago
Serge Zaitsev	fec634a091	Chore: Remove bus.Dispatch from guardian package (#46711) ... * replace bus in guardian with sqlstore * fix a couple of tests * replace bus in the rest of the tests * allow init guardian from other packages * make linter happy * init guardian in library elements * fix another test in libraryelements * fix more tests * move guardian mock one level deeper * fix more tests * rename init functions	3 years ago
Yuriy Tseretyan	2bd4c9ccde	respect query filter in FindDashboards (#46652)	3 years ago
Will Browne	bda3f860a8	Plugins: Add plugin settings DTO (#46283) ... * add clearer service layer * re-order frontend settings for clarity * fix fetch fail * fix API response * fix mockstore * in -> where	3 years ago
Yuriy Tseretyan	6967b15e76	Access Control: Update Alerting Navbar links builder to use fine-grained access control (#46743) ... * remove unnecesarry grants for some alerting roles * add permissions checks to navigation	3 years ago
Ieva	f2450575b3	Access control: FGAC for annotation updates (#46462) ... * proposal * PR feedback * fix canSave bug * update scope naming * linting * linting Co-authored-by: Ezequiel Victorero <ezequiel.victorero@grafana.com>	3 years ago
Eric Leijonmarck	c592e6606c	Filtering of service accounts by expired tokens (#46251) ... * Refactor to ServiceAccounts Query * filtering expiredtokens on backend * WIP * WIP * WIP * fix: missing that we do not cover for no service accounts * fix: wrong link * feat: filter able to get only service accounts with expired tokens * refactor: naming * Update pkg/services/serviceaccounts/models.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * goimported * Update pkg/services/serviceaccounts/api/api.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	3 years ago
idafurjes	52bd7618dd	Remove global variable from user (#46696) ... * Remove global variable from user * Remove missed x	3 years ago
Ryan McKinley	1cfb9a4a19	Storage: add basic storage service (#46604)	3 years ago
Karl Persson	4df7bf5ab2	Access control: Display inherited folder permissions in dashboards (#46421)	3 years ago
Ashley Harrison	586272e5f0	Navigation: Introduce a preferences table to store Navbar preferences (#44914) ... * First attempt at creating new navbar_preferences table in db * Apply to every nav item instead of just home * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * Chore: introduce initTestDB options for features * fix unit tests * Add another unit test and some logic for detecting if a preference already exists * tidy up * Only override IsFeatureToggleEnabled if it's defined * Extract setNavPreferences out into it's own function, initialise features correctly * Make the linter happy * Use new structure * user essentials mob! 🔱 * user essentials mob! 🔱 * Split NavbarPreferences from Preferences * user essentials mob! 🔱 * user essentials mob! 🔱 * Fix lint error * Start adding tests * Change internal db structure to be a generic json object * GetJsonData -> GetPreferencesJsonData * Stop using simplejson + add some more unit tests * Update pkg/api/preferences.go Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com> * Updates following review comments * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * Change patch to upsert, add a unit test * remove commented out code * introduce patch user/org preferences methods * Return Navbar preferences in the get call * Fix integration test by instantiating JsonData * Address review comments * Rename HideFromNavbar -> Hide * add swagger:model comment * Add patch to the preferences documentation * Add openapi annotations * Add a short description * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * user essentials mob! 🔱 * Update unit tests * remove unneeded url * remove outdated comment * Update integration tests * update generated swagger Co-authored-by: Alexandra Vargas <alexa1866@gmail.com> Co-authored-by: Hugo Häggmark <hugo.haggmark@gmail.com> Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com>	3 years ago
Yuriy Tseretyan	7df22c1573	Access Control: Fix Filter to correctly handle duplicated scopes (#46667)	3 years ago
Joan López de la Franca Beltran	2081f37e95	Encryption: Make DEKs cache TTL & cleanup interval configurable (#46042) ... * Make DEKs cache TTL & cleanup interval configurable * Improve 'data_keys_cache_ttl' setting description * Fix test	3 years ago
gotjosh	a338c78ca8	Alerting: Remove internal labels from prometheus compatible API responses (#46548) ... * Alerting: Remove internal labels from prometheus compatible API responses * Appease the linter * Fix integration tests * Fix API documentation & linter * move removal of internal labels to the models	3 years ago
Jguer	d5883c1b27	Service Accounts: Implement basic usage stats (#46619) ... * Stats: do not count SAs as users * Stats: implement basic service account metrics * Stats: do not count service account tokens as api keys * Stats: fix metric names * Stats: add SA stats test * rename user to sa	3 years ago
Karl Persson	943a8508a6	Handle case where there are no matching ids for all actions passed to (#46646)	3 years ago