grafana

Commit Graph

Author	SHA1	Message	Date
Josh Hunt	e55b438f14	E2C: Reduce UI poll interval and make configurable (#91386 ) * E2C: Reduce UI poll interval and make configurable * fix default	1 year ago
Gabriel MABILLE	8988e04044	RBAC: Add permission registry (#91247 ) * RBAC: Permission registry * Populate permission registry * Wire * conflic_user_cmd * Update pkg/services/accesscontrol/permreg/permreg_test.go Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * PR feedback Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * Remove ToDo, tackle in subsequent PR --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	1 year ago
Ieva	2e2ddc5c42	Folders: Allow folder editors and admins to create subfolders without any additional permissions (#91215 ) * separate permissions for root level folder creation and subfolder creation * fix tests * fix tests * fix tests * frontend fix * Update pkg/api/accesscontrol.go Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com> * fix frontend when action sets are disabled --------- Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>	1 year ago
Ryan McKinley	728150bdbd	Identity: extend k8s user.Info (#90937 )	1 year ago
Will Browne	1b3fa8c47f	Plugins: Hide version information when plugin is managed (#88065 ) * first pass * fixup * fix linter issues * fix API test * update naming * rework * update var name * empty check * prettier * fix test * fix lint	1 year ago
Kevin Minehart	c326d865c5	RBAC: Allow plugins to use scoped actions (#90946 ) Co-authored-by: gamab <gabriel.mabille@grafana.com>	1 year ago
Diego Augusto Molina	95000f9fc8	fix data race in GetWebAssets (#90939 )	1 year ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567 )	1 year ago
Alex Khomenko	8cdf5ee824	E2C: Add Public Preview banner (#90922 ) * E2C: Add public preview message * Read feedback URL from the settings * Translate strings * Add missing translation * Add missing translation[2]	1 year ago
Ieva	9bb2cf4968	RBAC: Allow omitting default permissions when a new resource is created (#90720 ) * Cfg: Move rbac settings to own struct * Cfg: Add setting to control if resource should generate managed permissions when created * Dashboards: Check if we should generate default permissions when dashboard is created * Folders: Check if we should generate default permissions when folder is created * Datasource: Check if we should generate default permissions when datasource is created * ServiceAccount: Check if we should generate default permissions when service account is created * Cfg: Add option to specify resources for wich we should default seed * ManagedPermissions: Move providers to their own files * Dashboards: Default seed all possible managed permissions if configured * Folders: Default seed all possible managed permissions if configured * Cfg: Remove service account from list * RBAC: Move utility function * remove managed permission settings from the config file examples, change the setting names * remove ini file changes from the PR * fix setting reading * fix linting errors * fix tests * fix wildcard role seeding --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com> Co-authored-by: jguer <me@jguer.space>	1 year ago
Julien Duchesne	25f0c70022	OpenAPI: Document the `/api/health` endpoint (#88203 ) Document `/api/health` with OpenAPI To do so, the response build had to be re-implemented as a struct	1 year ago
Eric Leijonmarck	248af65f9c	Actionsets: Add ability for plugins to add actions for core actionsets (i.e. `folders:edit`) (#88776 ) * initial commit * Action sets stored remove the dependancy for actionsets got the actionsets registered storing the permissions * fix golanglinting * remove unused struct field * wip * actionset registry for a plugin from the actionsetservice * update to make declareactionset the primary way of plugin registration and modification * declare actually extends actionsets * tests fixed * tests skipped * skip tests * skip tests * skip tests * skip tests * change to warning instead * remove step from pipeline to see if it fails due to plugin not registering * reintroduce step but remove features dependancy * add back the tests that were failing * remove comments and another skip test * fix a comment and remove unneeded changes * fix and clean up, put the behaviour behind a feature toggle * clean up * fixing tests * hard-code allowed action sets for plugins * Apply suggestions from code review Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * small cleanup --------- Co-authored-by: IevaVasiljeva <ieva.vasiljeva@grafana.com> Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	1 year ago
Hugo Kiyodi Oshiro	5c966fd400	Plugins: Add logs to for plugin management actions (#90587 ) * Plugins: Add logs to for plugin management actions --------- Co-authored-by: Giuseppe Guerra <giuseppe.guerra@grafana.com>	1 year ago
Kristina	6eb695b258	Explore: Add setting for default time offset (#90401 ) * Add setting for explore for a different time offset * fix linter * Add validation for duration value	1 year ago
Andrew Hackmann	319a874033	MSSQL: Password auth for Azure AD (#89746 ) * Password auth for Azure AD * rename auth fields * add azure flag for client password cred enabled * prettier * rename flag * Update go.mod * Update public/app/plugins/datasource/mssql/azureauth/AzureCredentialsForm.tsx Co-authored-by: Andreas Christou <andreas.christou@grafana.com> * Apply suggestions from code review Co-authored-by: Andreas Christou <andreas.christou@grafana.com> * update package * go mod * prettier * remove password * gowork * remove unused env test * linter --------- Co-authored-by: Andreas Christou <andreas.christou@grafana.com>	1 year ago
Kristin Laemmert	8a6107cd35	DashboardStore: Use ReplDB and get dashboard quotas from the ReadReplica (#90235 ) * Use ReplDB in dashboard store and update all fixtures - no other changes * just moving dashboard counts for now * find the missing test fixture	1 year ago
Aaron Godin	7e767e40a9	IAM: Fix logic for enabling a user (#90309 ) fix: correct logic on enabling a disabled user account	1 year ago
Nihal	c1d9e793be	Metrics: Fix internal metrics endpoint not accessible from browser if basic auth is enabled (#86904 ) * add WWW-Authenticate header in the http response of /metrics endpoint in case of wrong basic auth credentials Signed-off-by: Syed Nihal <syed.nihal@nokia.com> * added change log for the change fixing the issue https://github.com/grafana/grafana/issues/86902 Signed-off-by: Syed Nihal <syed.nihal@nokia.com> * Update CHANGELOG.md --------- Signed-off-by: Syed Nihal <syed.nihal@nokia.com>	1 year ago
Alex Khomenko	62494248e3	Restore dashboards: Add RBAC (#90270 ) * Restore dashboards: Add RBAC * Add check to navtree * Prevent non-admins from searching deleted dbs * Add check to the route * Cleanup * Update translations * Update API permissions * Correct permissions * Update warning message * Update translation * Return 401 for deleted query without admin role	1 year ago
Giuseppe Guerra	9216a3df7d	Plugins: Remove datasourceQueryMultiStatus feature toggle (#90191 ) * Remove datasourceQueryMultiStatus feature toggle * PR review suggestion	1 year ago
Charandas	c210617735	K8s: use contexthandler in standalone handler chain (#90102 )	1 year ago
Timur Olzhabayev	f763f2085b	Feat: Extending report interaction with static context that can be appended to all interaction events (#88927 ) * Extending report interaction with static context that can be appended to all requests	1 year ago
Kristin Laemmert	77a4869fca	accesscontrol service read replica (#89963 ) * accesscontrol service read replica * now using the ReplDB interface * ReadReplica for GetUser	1 year ago
Ieva	e9ebb6eaa4	Folders: Fix folder pagination for cloud instances with many folders (#90008 ) * filter the k6 folder out in the SQL queries rather than during post processing to ensure that the correct number of results is always returned * linting	1 year ago
Karl Persson	7a78ad3893	Authn: Remove response writer from auth req (#90110 ) Authn: Remove response writer from request	1 year ago
Alexander Zobnin	87d86e81ce	Zanzana: Evaluate permissions alongside with RBAC engine (#90064 ) * Zanzana: Evaluate permissions if feature flag enabled * Fix tests * adjust logs * fix spelling * remove unused * only evaluate implemented resources * refactor	1 year ago
Andres Martinez Gotor	be98ab1111	Add apiVersion to datasource settings DTO (#90057 )	1 year ago
Joao Silva	9004b58851	Navigation: Backend to save navigation customization into preferences (#89783 )	1 year ago
Jeff Levin	cfe8317d45	Add auth spans and remove deduplication code for scopes (#89804 ) Adds more spans for timing in accesscontrol and remove permission deduplicating code after benchmarking --------- Signed-off-by: Dave Henderson <dave.henderson@grafana.com> Co-authored-by: Dave Henderson <dave.henderson@grafana.com> Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	1 year ago
Josh Hunt	52ea6236d4	E2C: Set up page route so cloud-migrations doesn't 404 (#89947 )	1 year ago
Karl Persson	e568b86ac0	Zanzana: Initial work to allow partial data migrations (#89919 ) * Zanana: Add Write method to interface * Zanzana: Add utilities for translating RBAC to openFGA tuple keys * RBAC: Add zanzana synchronizer * Run zanzana sync in access controll provider	1 year ago
Andres Martinez Gotor	a22c1ae424	Chore: Remove provisional APIVersion from plugin info (#89831 )	1 year ago
Jeff Levin	ed13959e33	Optimize memory allocations in permissions cache (#89645 ) This PR reduces the number of allocations made while caching permissions from the database, fixes the hierarchy of spans and adds new spans for tracing. --------- Signed-off-by: Dave Henderson <dave.henderson@grafana.com> Co-authored-by: Dave Henderson <dave.henderson@grafana.com>	1 year ago
Marcus Andersson	04f39457cf	Chore: Remove sensitive information from presigned URLs prior to logging (#87035 ) Co-authored-by: Will Browne <wbrowne@users.noreply.github.com> Co-authored-by: Dan Cech <dcech@grafana.com> Co-authored-by: Andres Martinez Gotor <andres.martinez@grafana.com>	2 years ago
Ryan McKinley	27e800768e	K8s: Improve identity mapping setup (#89450 )	2 years ago
Laura Benz	34b3dbdbf3	RestoreDashboards: Adjust path (#89233 ) * refactor: change path * fix: page headline * refactor: remove condition	2 years ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116 )	2 years ago
Ashley Harrison	822644714a	Navigation: Remove `ApplyAdminIA` logic (#89113 ) make admin IA more normal	2 years ago
Aaron Godin	59a6a6513f	Prevent moving a k6 folder (#88884 ) * iam-716 - prevent a folder move operation when the folder's uid or any of its parents uids begin with k6-app * fox folder move check and only list non-k6 folders to users * adding tests for moving * add a test for listing folders * fix the other tests * use method that adds folder parent --------- Co-authored-by: IevaVasiljeva <ieva.vasiljeva@grafana.com>	2 years ago
Marcus Efraimsson	fe3e5917f1	Plugins: Preserve trailing slash in plugin proxy (#86859 ) * Plugins: Preserve trailing slash in plugin proxy * enable toggle by default	2 years ago
Andres Martinez Gotor	60ce523b72	Refactor plugin context initialization (#88343 )	2 years ago
Tim Levett	b5cf90ce78	API: Add in theme support to /render/* endpoint (#88304 ) add in theme support to render endpoint	2 years ago
Ryan McKinley	ffc2702552	Plugins: Support Admission validation hooks (#87718 )	2 years ago
Juan Cabanas	a85c1b69d5	PublicDashboards: Remove publicDashboardUid from DashboardMeta (#85126 )	2 years ago
Ieva	bd2b248f0e	RBAC: Clean up action set code (#88147 ) * remove unused action set code, refactor the existing code * fix import ordering * use a separate interface for permission expansion after all, to avoid circular dependencies * add comments, fix a test	2 years ago
Mathieu Parent	b8c9ae0eb7	OIDC: Support Generic OAuth org to role mappings (#87394 ) * Social: link to OrgRoleMapper * OIDC: support Generic Oauth org to role mappings Fixes: #73448 Signed-off-by: Mathieu Parent <math.parent@gmail.com> * Handle when getAllOrgs fails in the org_role_mapper * Add more tests * OIDC: ensure orgs are evaluated from API when not from token Signed-off-by: Mathieu Parent <math.parent@gmail.com> * OIDC: ensure AutoAssignOrg is applied with OrgMapping without RoleAttributeStrict Signed-off-by: Mathieu Parent <math.parent@gmail.com> * Extend docs * Fix test, lint --------- Signed-off-by: Mathieu Parent <math.parent@gmail.com> Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com>	2 years ago
Ieva	3e77768144	RBAC: Expand action sets when fetching permissions (#87967 ) * logic to expand action set to the underlying actions when permissions are fetched from the DB * updates needed for dependency injection * clean up some code, also deduplicate scopes when grouping scopes and actions * expand on a comment * rename a method	2 years ago
Aaron Godin	0072e4a92d	Update DS Proxy to use RBAC action (#87517 ) iam-team: Update DS Proxy to use RBAC action	2 years ago
Ezequiel Victorero	42d75ac737	Dashboards: Add feature restore dashboards backend (#83131 ) Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>	2 years ago
Andres Martinez Gotor	d8904f3ca4	Add apiVersion to plugin models (#87510 )	2 years ago

1 2 3 4 5 ...

3613 Commits (c46b42a59528f3690331175eceb61ffa16b19ca7)