3407 Commits (b40913c5e5925ddfb63e0d2007cf92d7c15b2400)

Author	SHA1	Message	Date
Ieva	c354c7bfff	RBAC: Update fixed annotation roles (#78756) ... * update fixed annotation roles if FlagAnnotationPermissionUpdate is enabled * add dashboard type scope back in the fixed roles to make the migration easier	2 years ago
Gabriel MABILLE	ef2c79d22a	Chore: use errutil for pluginRepo errors (#78647) ... * Chore: use errutil for pluginRepo errors * Update pkg/util/errutil/status.go * Use errutil helper functions Co-Authored-By: Marcus Efraimsson <marcus.efraimsson@gmail.com> * Forgot the log level * Use entity --------- Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com>	2 years ago
Eric Leijonmarck	59bdff0280	Auth: Add anonymous users view and stats (#78685) ... * Add anonymous stats and user table - anonymous users users page - add feature toggle `anonymousAccess` - remove check for enterprise for `Device-Id` header in request - add anonusers/device count to stats * promise all, review comments * make use of promise all settled * refactoring: devices instead of users * review comments, moved countdevices to httpserver * fakeAnonService for tests and generate openapi spec * do not commit openapi3 and api-merged * add openapi * Apply suggestions from code review Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com> * formatin * precise anon devices to avoid confusion --------- Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com> Co-authored-by: jguer <me@jguer.space>	2 years ago
venkatbvc	e152323a33	Auth: Split signout_redirect_url into per provider settings (#75269) ... * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * Update docs/sources/setup-grafana/configure-security/configure-authentication/grafana/index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * Split signout_redirect_url into per provider settings * update docs * update devenvs * add missing struct tag --------- Co-authored-by: Rao, B V Chalapathi <b_v_chalapathi.rao@nokia.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: jguer <me@jguer.space>	2 years ago
Ieva	d201d3f7db	RBAC: correctly fetch nested folder metadata (#78655) ... fix a bug with nested folder metadata	2 years ago
Todd Treece	529271d7a8	Perf: Disable core kind registry (#78568) ... Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Gabriel MABILLE	24a6ee4a91	Plugins: Check installer's permissions include plugins' permissions (#78211) ... * Check installer perm * Failed eval better output * Switch fetching json data in the repo * Comment * Account for feedback * Mv single_organization config option * Inline error check * Starting to replace errors not to have to do the management in two places * Continue error translation * Cover ErrChecksumMismatch * Refactor a bit * Lint. Tab * log instead of erroring out * Nit. * Revert change on kinds * revert file again * Fix tests * Match core plugin error status code * Skip permission check for Grafana Admin * Use errutil templates * Use errutil templating * Inline * Test templating * revert error changes * Remove isGrafanaAdmin skip * Feature toggle check * Small refactor on hasPluginRequestedPermissions * Add test * Imports * Post install check * change log messages so that they make sense * Cover no scope case * Inline * Nit. * Fix test	2 years ago
Jo	7d559bc69a	AuthProxy: Do not allow sessions to be assigned with other methods (#78602) ... do not allow login token with other methods	2 years ago
Misi	7128415529	Auth: Add more context to logs around token rotation, revocation (#78600) ... Add more context to logs around token rotation, revocation Co-authored-by: Karl Persson <kalle.persson@grafana.com>	2 years ago
Ieva	778841cabe	Annotations: Remove dashboard permission checks for annotations (#78352) ... remove checks for access to dashboard if FlagAnnotationPermissionUpdate is enabled	2 years ago
Jo	0de66a8099	Authz: Remove use of SignedInUser copy for permission evaluation (#78448) ... * remove use of SignedInUserCopies * add extra safety to not cross assign permissions unwind circular dependency dashboardacl->dashboardaccess fix missing import * correctly set teams for permissions * fix missing inits * nit: check err * exit early for api keys	2 years ago
Juan Cabanas	9c5daed336	PublicDashboards: Middleware creation (#77941)	2 years ago
Gabriel MABILLE	b6b86bb0b3	RBAC: Check `plugins:install` globally (#78438) ... * RBAC: Check plugins:install globally * Add disclamer to the RBACSingleOrganization config option	2 years ago
Karl Persson	1eb19befaa	Login: refactor auth info package (#78459) ... * Remove unused stats and metrics * No longer collect metrics * Remove unused dependency * Move database from sub package	2 years ago
Karl Persson	d42201dbf4	Login: remove unused function (#78442) ... * Move test to the db so we test the queries and not just testing the mock * Remove unused function and dependencies * Remove unused functions from the database * Add some integration tests	2 years ago
Kat Yang	2f2ce3edbb	Chore: Deprecate ID from Folder (#78281) ... * Chore: Deprecate ID from Folder * chore: add more linter comments * chore: add missing lint comment	2 years ago
Ashley Harrison	7404ed66f6	Chore: Remove `navAdminSubsections` toggle (#78179) ... * remove navAdminSubsections toggle * missed one!	2 years ago
Ieva	2a5547e1b5	Annotations: Update annotation scope resolver to resolve annotation scopes to dash and folder scopes (#78222) ... * update annotation scope resolver to resolve dashboard annotation scopes to dash and folder scopes * Update annotations.go remove unwanted changes * remove unwanted change * use switch statement	2 years ago
Kat Yang	2d09bac2b8	Chore: Deprecate FolderIDs only used by Swagger (#78219)	2 years ago
Ieva	b0448b92e5	Dashboards: Allow updating a dashboard if the user doesn't have access to the parent folder (#78075) ... * change where folder checks are done for dash creation/updates * add test for folder not being found * test fixes * more test fixes * add nlint directive to where folder IDs are used * fix bad merge * fix test	2 years ago
Ieva	2c73f15839	Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130" (#78203) ... Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130 (#78198)" This reverts commit 8057b9298d.	2 years ago
Kat Yang	d090dab138	Chore: Deprecate FolderID from SaveDashboardCommand (#77813)	2 years ago
Kat Yang	8d581b8358	Chore: Deprecate ID in GetFolderQuery (#77647)	2 years ago
Kat Yang	a640d9d395	Chore: Deprecate Id from Folder in DTOs (#77943) ... * Chore: Deprecate Id from Folder in DTOs * chore: regen spec	2 years ago
Kat Yang	ae326eaed1	Chore: Deprecate FolderID from DashboardACLInfoDTO (#77652) ... * Chore: Deprecate FolderID from DashboardACLInfoDTO * chore: regen specs	2 years ago
Kat Yang	3a2e96b0db	Chore: Deprecate FolderID from Dashboard (#77823) ... * Chore: Deprecate FolderID from Dashboard * chore: add two missing nolint comments	2 years ago
Ryan McKinley	b8e8d84ef7	Swagger: Show k8s APIs (#78091)	2 years ago
Eric Leijonmarck	8057b9298d	Revert "RBAC: remove dashboard ACL logic from dash store, service #78130 (#78198) ... Revert "RBAC: remove dashboard ACL logic from dash store and service (#78130)" This reverts commit dd54931147.	2 years ago
Ieva	dd54931147	RBAC: remove dashboard ACL logic from dash store and service (#78130) ... remove dashboard ACL logic from dash store and service	2 years ago
Ryan McKinley	f69fd3726b	FeatureToggles: Add context and and an explicit global check (#78081)	2 years ago
Ryan McKinley	ea37a116f7	K8s: expose namespace in frontend_settings (#78090) ... Co-authored-by: Todd Treece <360020+toddtreece@users.noreply.github.com>	2 years ago
Ryan McKinley	dec9a07738	Settings: Actually deprecate access to feature flags (#78073)	2 years ago
Ryan McKinley	3509a5abb9	FeatureFlags: Cleanup usage of cfg.IsFeatureToggleEnabled (#78014)	2 years ago
Ieva	eca45f6492	Chore: remove `gcomOnlyExternalOrgRoleSync` feature toggle (#78001) ... remove gcomOnlyExternalOrgRoleSync feature toggle	2 years ago
Hugo Kiyodi Oshiro	e754c5a6c6	Plugins: Change managed plugins installation call (#77120)	2 years ago
Will Browne	7d2d5fbe89	Plugins: Add referer and user login params to plugin CDN redirect logs (#77942) ... add referer and user	2 years ago
Giuseppe Guerra	da117aea1c	Plugins: Allow disabling angular deprecation UI for specific plugins (#77026) ... * Plugins:Allow disabling angular deprecation UI for specific plugins * add backend test * changed test names * lint * Removed angular properties from DataSourceDTO * Update tests * Move angularDetected and hideAngularDeprecation in angularMeta property * Fix angular property name in AppPluginConfig * Fix reference to angularMeta.detected * Fix hide_angular_deprecation not working for core plugins * lint	2 years ago
Agnès Toulet	bb12fe7d82	UsageInsights: Disable frontend features when backend is disabled (#77772) ... * UsageInsights: Disable frontend features when backend is disabled * Disable DS insights * Update doc * fix linter issue * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Ryan McKinley	4b5310dae7	Playlists: Merge the frontend vs backend k8s feature flags (#77875)	2 years ago
Eric Leijonmarck	c13fd62b16	Team LBAC: Add permission check for Update datasource (#77709) ... * add permission check for updating the LBAC Rules * permission scoped for id in the updating datasource * fixed test to cover for permissions * fix proper check for permissions and empty teamHTTPHeader requests * check for jsondata * check nil for jsondata inside the getEncodedString	2 years ago
Alexander Zobnin	a39242890e	Folders: Able to fetch folders available for user as "shared" folder (#77774) ... * Folders: Show folders user has access to at the root level * Refactor * Refactor * Hide parent folders user has no access to * Skip expensive computation if possible * Fix tests * Fix potential nil access * Fix duplicated folders * Fix linter error * Fix querying folders if no managed permissions set * Update benchmark * Add special shared with me folder and fetch available non-root folders on demand * Fix parents query * Improve db query for folders * Reset benchmark changes * Fix permissions for shared with me folder * Simplify dedup * Add option to include shared folder permission to user's permissions * Fix nil UID * Remove duplicated folders from shared list * Only left the base part * Apply suggestions from code review Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com> * Add tests * Fix linter errors --------- Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>	2 years ago
Kat Yang	a5044fe6db	Chore: Deprecate FolderIds in Query (#77624) ... Chore: Deprecate FolderID in Query	2 years ago
Kat Yang	6ed09de47d	Chore: Deprecate FolderId in DashboardMeta (#77626) ... * Chore: Deprecate FolderId in DashboardMeta * chore: regen specs	2 years ago
Sofia Papagiannaki	f999fe3d12	Search: Modify query for better performance (#77576) ... * Add missing `org_id` in query condition * Update benchmarks	2 years ago
Ryan McKinley	549787d4f9	Playlist: Implement the entire API with k8s client (#77596)	2 years ago
João Calisto	ade140c161	Feature Management: Define HideFromAdminPage and AllowSelfServe configs (#77580) ... * Feature Management: Define HideFromAdminPage and AllowSelfServe configs * update tests * add constraint for self-serve * Update pkg/services/featuremgmt/models.go Co-authored-by: Michael Mandrus <41969079+mmandrus@users.noreply.github.com> --------- Co-authored-by: Michael Mandrus <41969079+mmandrus@users.noreply.github.com>	2 years ago
Ryan McKinley	35c1ee9686	EntityStore: Remove http access (can use apiserver now) (#77602)	2 years ago
Ryan McKinley	dd654fdc87	K8s/Playlist: Refactor apis packages so the types and registry are in different packages (#77586)	2 years ago
Alexander Zobnin	225a69ba02	Team LBAC: Fix backend validation (#77612) ... * Team LBAC: Fix backend validation * more tests * use slices.ContainsFunc()	2 years ago
Vardan Torosyan	d624a5d490	Chore: Replace grafana-authnz-team with identity-access-team as code owners (#77609) ... * Chore: Replace grafana-authnz-team with identity-access-team as code owner * Chore: Replace grafana-authnz-team with identity-access-team as code owner * Fix the failing test	2 years ago