64 Commits (c440bd2bdaec8fed13f47fdfe76dda63e7d0008a)

Author	SHA1	Message	Date
Yuri Tseretyan	af513964c8	Alerting: Migration to remove scope from permission alert.notifications.receivers:create (#95805) ... add migration to remove scope from receivers:create permission	1 year ago
Karl Persson	6f7528f896	Migration: Remove table aliasing in delete statement to make it work for mariadb (#95226) ... Migration: remove table aliasing in delete statement to make it work in mariadb	1 year ago
Karl Persson	2d0ea60017	ServiceAccounts: Run migration in batches (#94429) ... * ServiceAccounts: Run migration in batches	1 year ago
Ieva	d7aca7d0fe	Role mapping: Add `group_mapping_uid` column to `user_role` table (#93810) ... * add group_mapping_uid column to user_role table * add group mapping UID to user role struct	1 year ago
Ieva	6eeef432de	RBAC: Add dash and folder action sets where they are missing (#92832) ... * add dash and folder action sets where they are missing * remove an empty line, try to make linting pass	1 year ago
Karl Persson	c7ca2bfcf5	ServiceAccounts: Remove permissions to service account when it is deleted (#93877) ... * Service account: clean up permissions related to service accounts when deleted * Add migration for deleting orphaned service account permissions Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	1 year ago
Karl Persson	ddee95cb6d	Team: Create permission type for team membership (#92352) ... * Create permission type enum for team and remove usage of dashboard permission type	1 year ago
Yuri Tseretyan	12605bfed2	Alerting: Update fixed roles to include silences permissions (#85826) ... * update fixed roles to include silences * add silence actions to managed permissions * update documentation	2 years ago
Ieva	65534e62a6	RBAC: add kind, attribute and identifier to annotation permissions during the migration (#83299) ... add kind, attribute and identifier to annotation permissions during the migration	2 years ago
Ieva	7343102d59	RBAC: Migration to remove the scope from permissions where action is alert.instances:read (#82202) ... * add a migration to remove the scope from any permissions where action is alert.instances:read * linting	2 years ago
Dan Cech	790e1feb93	Chore: Update test database initialization (#81673) ... * streamline initialization of test databases, support on-disk sqlite test db * clean up test databases * introduce testsuite helper * use testsuite everywhere we use a test db * update documentation * improve error handling * disable entity integration test until we can figure out locking error	2 years ago
Ryan McKinley	9c9e5e68c8	User: Add uid colum to user table (#81615)	2 years ago
Ryan McKinley	1fab107e79	FeatureFlags: Avoid using cfg.IsFeatureToggleEnabled (#81407)	2 years ago
Ieva	048d1e7c86	RBAC: Annotation permission migration (#78899) ... * add annotation permissions to dashboard managed role and add migrations for annotation permissions * fix a bug with conditional access level definitions * add tests * Update pkg/services/sqlstore/migrations/accesscontrol/dashboard_permissions.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * apply feedback * add batching, fix tests and a typo * add one more test * undo unneeded change * undo unwanted change * only check the default basic permissions for non-OSS instances * account for all wildcards and simplify the check a bit * error handling and extra conditionals to avoid test failures * fix a bug with admin permissions not appearing for folders * fix the OSS check --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2 years ago
Matthew Jacobson	e45f664ca4	Alerting: Replace index role_id, action, scope with action, scope, role_id on permission table (#80336) ... * Alerting: Add action, scope, role_id to permission table The existing role_id, action, scope index has the wrong ordering to be most effectively used in dashboard/folder permission requests. On a large tests set, the slow database calls were on the order of ~30-40ms, so when performed individually they don't have that large of a latency impact. However, when done in bulk in the migration this adds up to some very slow requests. After the index is added these same database calls are reduced to ~4-5ms * Change index to action, scope, role_id * Make new index unique and drop [role_id, action, scope] index	2 years ago
Gabriel MABILLE	63679813b0	RBAC: prevent seeding oncall access (#80862) ... * RBAC: prevent seeding oncall access * Add comments and an early exit * Test SeedAssignmentOnCallAccessMigrator * imports * Comment rework * Check error * Nit.	2 years ago
Gabriel MABILLE	c9ac069076	RBAC: Add origin column to seed_assignment (#80326) ... * RBAC: Add origin column to seed_assignment * Add OnCall permission migration	2 years ago
Jo	0de66a8099	Authz: Remove use of SignedInUser copy for permission evaluation (#78448) ... * remove use of SignedInUserCopies * add extra safety to not cross assign permissions unwind circular dependency dashboardacl->dashboardaccess fix missing import * correctly set teams for permissions * fix missing inits * nit: check err * exit early for api keys	2 years ago
Ryan McKinley	f69fd3726b	FeatureToggles: Add context and and an explicit global check (#78081)	2 years ago
Ryan McKinley	dec9a07738	Settings: Actually deprecate access to feature flags (#78073)	2 years ago
Ryan McKinley	3509a5abb9	FeatureFlags: Cleanup usage of cfg.IsFeatureToggleEnabled (#78014)	2 years ago
kay delaney	a12cb8cbf3	LibraryPanels: Add RBAC support (#73475)	2 years ago
Ryan McKinley	025b2f3011	Chore: use any rather than interface{} (#74066)	2 years ago
Ieva	cfa1a2c55f	RBAC: Split non-empty scopes into `kind`, `attribute` and `identifier` fields for better search performance (#71933) ... * add a feature toggle * add the fields for attribute, kind and identifier to permission Co-authored-by: Kalle Persson <kalle.persson@grafana.com> * set the new fields when new permissions are stored * add migrations Co-authored-by: Kalle Persson <kalle.persson@grafana.com> * remove comments * Update pkg/services/accesscontrol/migrator/migrator.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * feedback: put column migrations behind the feature toggle, added an index, changed how wildcard scopes are split * PR feedback: add a comment and revert an accidentally changed file * PR feedback: handle the case with : in resource identifier * switch from checking feature toggle through cfg to checking it through featuremgmt * don't put the column migrations behind a feature toggle after all - this breaks permission queries from db --------- Co-authored-by: Kalle Persson <kalle.persson@grafana.com> Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	3 years ago
Dan Cech	a6279b2d62	Database: Make dialects independent of xorm Engine (#69955) ... * make dialects independent of xorm Engine * goimports	3 years ago
Ieva	035bf29146	RBAC: Remove the option to disable RBAC and add automated permission migrations for instances that had RBAC disabled (#66652) ... * RBAC: Stop reading enabeld from ini file and always set to true * Migrations: Add a migration for rbac to reset data migrations if rbac was disabled * If rbac was disabled we reset the data and data migrations that rbac has to perform to get it to a correct state * Migrator: Store migration logs on migrator and add function to clear it from the in-memory stored logs * update tests --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	3 years ago
Emil Tullstedt	3abaf32cf2	Chore: Upgrade golangci-lint to v1.51.2 (#63630) ... Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>	3 years ago
Serge Zaitsev	bc2813ef06	Chore: Fix goimports grouping in pkg/services (#62420) ... * fix goimports * fix goimports order	3 years ago
Kristin Laemmert	e8b8a9e276	chore: move dashboard_acl models into dashboard service (#62151)	3 years ago
idafurjes	68445a7c77	Chore: Remove dashboard ACL from models (#61749) ... * Remove dashboard ACL from models * Remove unused comment	3 years ago
Denis Limarev	e6dee8a723	Perfomance: Preallocate slices (#61580)	3 years ago
idafurjes	490a787d9d	Chore: Move tem member models to team pkg (#61294) ... * Chore: Move tem member models to team pkg * Fix test lint	3 years ago
idafurjes	f2ffce4351	Chore: Move team models to models pkg (#61262) ... * Chore: Move team models to models pkg * Fix ACL tests * More ACL tests * Change Id to ID in conflict user command test * Remove team from models * Fix ac test lint	3 years ago
idafurjes	7dcb502b33	Chore: Remove org model duplicates (#61025) ... Remove org model duplicates	3 years ago
Karl Persson	6aaf36776b	RBAC: Handle edge case where there is duplicated acl entries for a role on a single dashboard (#58079) ... * RBAC: Handle edge case where there is duplicated acl entries for a role on a single dashboard	3 years ago
Eric Leijonmarck	fc1b647474	Auth: Add fixed repeat migration w. checks for subset of permissions (#58054) ... * add: added a repeat migration w. fixed checks for permissions * add: migration to migrations * refactor: fix migration instead of making a new one * fix: removed the old id * fix: keep old name but change id * add: migration for patched previous migration * add: migration from missing file	3 years ago
Karl Persson	21792fdf37	RBAC: Make uid for managed role names deterministic during migrations (#56620) ... * RBAC: Change the generate uid function to be deterministic so we can avoid collision * RBAC: Use fmt.Errorf * RBAC: Add comment * RBAC: Export GenerateManagedRoleUID	3 years ago
Karl Persson	b1761908c2	RBAC: Add primary key to seed_assignment table (#56540) ... * RBAC: Add seed_assignment migrations from enterprise * RBAC: Create migration to add primary key to seed_assignment table	3 years ago
Ieva	6d5bdf12e8	resolve merge conflicts (#55503)	3 years ago
idafurjes	6afad51761	Move SignedInUser to user service and RoleType and Roles to org (#53445) ... * Move SignedInUser to user service and RoleType and Roles to org * Use go naming convention for roles * Fix some imports and leftovers * Fix ldap debug test * Fix lint * Fix lint 2 * Fix lint 3 * Fix type and not needed conversion * Clean up messages in api tests * Clean up api tests 2	3 years ago
Ieva	39025bb4cd	add logs to debug failing migration (#52447)	4 years ago
idafurjes	f5cace8bbd	Rename Acl to ACL (#52342) ... * Rename Acl to ACL * Fix yaml files * Add xorm tags and fix test	4 years ago
Ieva	c851907fc3	Access Control: Fix missing folder permissions (#52153) ... * add the migration * Update pkg/services/sqlstore/migrations/accesscontrol/dashboard_permissions.go Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com> Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>	4 years ago
idafurjes	6c43eb0b4d	Split Create User (#50502) ... * Split Create User * Use new create user and User from package user * Add service to wire * Making create user work * Replace user from user pkg * One more * Move Insert to orguser Service/Store * Remove unnecessary conversion * Cleaunp * Fix Get User and add fakes * Fixing get org id for user logic, adding fakes and other adjustments * Add some tests for ourguser service and store * Fix insert org logic * Add comment about deprecation * Fix after merge with main * Move orguser service/store to org service/store * Remove orguser from wire * Unimplement new Create user and use User from pkg user * Fix wire generation * Fix lint * Fix lint - use only User and CrateUserCommand from user pkg * Remove User and CreateUserCommand from models * Fix lint 2	4 years ago
Gabriel MABILLE	307a0d4538	RBAC: Inheritance permission migration should handle empty managed roles (#50611) ... * Make inheritance permission migration more robust * Better fix * Add more tests to the migration * Add removed test case * Add test case for empty role in empty org * Handling the role.ID 0 case with a log Co-authored-by: Jguer <joao.guerreiro@grafana.com> Co-authored-by: Jguer <joao.guerreiro@grafana.com>	4 years ago
Gabriel MABILLE	2813e49842	RBAC: Fix migrations running into the wrong order (#50452) ... Co-authored-by: Kalle Persson <kalle.persson@grafana.com> Co-authored-by: Kalle Persson <kalle.persson@grafana.com>	4 years ago
Ieva	7c800421d3	RBAC: change migration logic (#50187) ... * change migration logic * linting * linting * fix an issue with the migration logic * make tests runnable against other DBs Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com> Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>	4 years ago
Ieva	5dbea9996b	RBAC: Make RBAC action names more consistent (#49730) ... * update action names * correctly retrieve teams for signed in user * remove test * undo swagger changes * undo swagger changes pt2 * add migration from old action names to the new ones * rename from list to read * linting * also update alertign actions * fix migration	4 years ago
Karl Persson	bdff63d4a8	RBAC: Include alert.rules action when setting folder permissions (#49946) ... * Generate additional actions when setting folder permissions in acl list * Add migration for managed folder permissions to include alert rule actions	4 years ago
Karl Persson	f4f25d911b	add migrator to drop folder create actions that was set fromt he folder (#49878)	4 years ago