3613 Commits (c46b42a59528f3690331175eceb61ffa16b19ca7)

Author	SHA1	Message	Date
Josh Hunt	e55b438f14	E2C: Reduce UI poll interval and make configurable (#91386) ... * E2C: Reduce UI poll interval and make configurable * fix default	10 months ago
Gabriel MABILLE	8988e04044	RBAC: Add permission registry (#91247) ... * RBAC: Permission registry * Populate permission registry * Wire * conflic_user_cmd * Update pkg/services/accesscontrol/permreg/permreg_test.go Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * PR feedback Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * Remove ToDo, tackle in subsequent PR --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	10 months ago
Ieva	2e2ddc5c42	Folders: Allow folder editors and admins to create subfolders without any additional permissions (#91215) ... * separate permissions for root level folder creation and subfolder creation * fix tests * fix tests * fix tests * frontend fix * Update pkg/api/accesscontrol.go Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com> * fix frontend when action sets are disabled --------- Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>	10 months ago
Ryan McKinley	728150bdbd	Identity: extend k8s user.Info (#90937)	10 months ago
Will Browne	1b3fa8c47f	Plugins: Hide version information when plugin is managed (#88065) ... * first pass * fixup * fix linter issues * fix API test * update naming * rework * update var name * empty check * prettier * fix test * fix lint	10 months ago
Kevin Minehart	c326d865c5	RBAC: Allow plugins to use scoped actions (#90946) ... Co-authored-by: gamab <gabriel.mabille@grafana.com>	10 months ago
Diego Augusto Molina	95000f9fc8	fix data race in GetWebAssets (#90939)	10 months ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	10 months ago
Alex Khomenko	8cdf5ee824	E2C: Add Public Preview banner (#90922) ... * E2C: Add public preview message * Read feedback URL from the settings * Translate strings * Add missing translation * Add missing translation[2]	10 months ago
Ieva	9bb2cf4968	RBAC: Allow omitting default permissions when a new resource is created (#90720) ... * Cfg: Move rbac settings to own struct * Cfg: Add setting to control if resource should generate managed permissions when created * Dashboards: Check if we should generate default permissions when dashboard is created * Folders: Check if we should generate default permissions when folder is created * Datasource: Check if we should generate default permissions when datasource is created * ServiceAccount: Check if we should generate default permissions when service account is created * Cfg: Add option to specify resources for wich we should default seed * ManagedPermissions: Move providers to their own files * Dashboards: Default seed all possible managed permissions if configured * Folders: Default seed all possible managed permissions if configured * Cfg: Remove service account from list * RBAC: Move utility function * remove managed permission settings from the config file examples, change the setting names * remove ini file changes from the PR * fix setting reading * fix linting errors * fix tests * fix wildcard role seeding --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com> Co-authored-by: jguer <me@jguer.space>	10 months ago
Julien Duchesne	25f0c70022	OpenAPI: Document the `/api/health` endpoint (#88203) ... Document `/api/health` with OpenAPI To do so, the response build had to be re-implemented as a struct	10 months ago
Eric Leijonmarck	248af65f9c	Actionsets: Add ability for plugins to add actions for core actionsets (i.e. `folders:edit`) (#88776) ... * initial commit * Action sets stored remove the dependancy for actionsets got the actionsets registered storing the permissions * fix golanglinting * remove unused struct field * wip * actionset registry for a plugin from the actionsetservice * update to make declareactionset the primary way of plugin registration and modification * declare actually extends actionsets * tests fixed * tests skipped * skip tests * skip tests * skip tests * skip tests * change to warning instead * remove step from pipeline to see if it fails due to plugin not registering * reintroduce step but remove features dependancy * add back the tests that were failing * remove comments and another skip test * fix a comment and remove unneeded changes * fix and clean up, put the behaviour behind a feature toggle * clean up * fixing tests * hard-code allowed action sets for plugins * Apply suggestions from code review Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * small cleanup --------- Co-authored-by: IevaVasiljeva <ieva.vasiljeva@grafana.com> Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	10 months ago
Hugo Kiyodi Oshiro	5c966fd400	Plugins: Add logs to for plugin management actions (#90587) ... * Plugins: Add logs to for plugin management actions --------- Co-authored-by: Giuseppe Guerra <giuseppe.guerra@grafana.com>	10 months ago
Kristina	6eb695b258	Explore: Add setting for default time offset (#90401) ... * Add setting for explore for a different time offset * fix linter * Add validation for duration value	10 months ago
Andrew Hackmann	319a874033	MSSQL: Password auth for Azure AD (#89746) ... * Password auth for Azure AD * rename auth fields * add azure flag for client password cred enabled * prettier * rename flag * Update go.mod * Update public/app/plugins/datasource/mssql/azureauth/AzureCredentialsForm.tsx Co-authored-by: Andreas Christou <andreas.christou@grafana.com> * Apply suggestions from code review Co-authored-by: Andreas Christou <andreas.christou@grafana.com> * update package * go mod * prettier * remove password * gowork * remove unused env test * linter --------- Co-authored-by: Andreas Christou <andreas.christou@grafana.com>	10 months ago
Kristin Laemmert	8a6107cd35	DashboardStore: Use ReplDB and get dashboard quotas from the ReadReplica (#90235) ... * Use ReplDB in dashboard store and update all fixtures - no other changes * just moving dashboard counts for now * find the missing test fixture	11 months ago
Aaron Godin	7e767e40a9	IAM: Fix logic for enabling a user (#90309) ... fix: correct logic on enabling a disabled user account	11 months ago
Nihal	c1d9e793be	Metrics: Fix internal metrics endpoint not accessible from browser if basic auth is enabled (#86904) ... * add WWW-Authenticate header in the http response of /metrics endpoint in case of wrong basic auth credentials Signed-off-by: Syed Nihal <syed.nihal@nokia.com> * added change log for the change fixing the issue https://github.com/grafana/grafana/issues/86902 Signed-off-by: Syed Nihal <syed.nihal@nokia.com> * Update CHANGELOG.md --------- Signed-off-by: Syed Nihal <syed.nihal@nokia.com>	11 months ago
Alex Khomenko	62494248e3	Restore dashboards: Add RBAC (#90270) ... * Restore dashboards: Add RBAC * Add check to navtree * Prevent non-admins from searching deleted dbs * Add check to the route * Cleanup * Update translations * Update API permissions * Correct permissions * Update warning message * Update translation * Return 401 for deleted query without admin role	11 months ago
Giuseppe Guerra	9216a3df7d	Plugins: Remove datasourceQueryMultiStatus feature toggle (#90191) ... * Remove datasourceQueryMultiStatus feature toggle * PR review suggestion	11 months ago
Charandas	c210617735	K8s: use contexthandler in standalone handler chain (#90102)	11 months ago
Timur Olzhabayev	f763f2085b	Feat: Extending report interaction with static context that can be appended to all interaction events (#88927) ... * Extending report interaction with static context that can be appended to all requests	11 months ago
Kristin Laemmert	77a4869fca	accesscontrol service read replica (#89963) ... * accesscontrol service read replica * now using the ReplDB interface * ReadReplica for GetUser	11 months ago
Ieva	e9ebb6eaa4	Folders: Fix folder pagination for cloud instances with many folders (#90008) ... * filter the k6 folder out in the SQL queries rather than during post processing to ensure that the correct number of results is always returned * linting	11 months ago
Karl Persson	7a78ad3893	Authn: Remove response writer from auth req (#90110) ... Authn: Remove response writer from request	11 months ago
Alexander Zobnin	87d86e81ce	Zanzana: Evaluate permissions alongside with RBAC engine (#90064) ... * Zanzana: Evaluate permissions if feature flag enabled * Fix tests * adjust logs * fix spelling * remove unused * only evaluate implemented resources * refactor	11 months ago
Andres Martinez Gotor	be98ab1111	Add apiVersion to datasource settings DTO (#90057)	11 months ago
Joao Silva	9004b58851	Navigation: Backend to save navigation customization into preferences (#89783)	11 months ago
Jeff Levin	cfe8317d45	Add auth spans and remove deduplication code for scopes (#89804) ... Adds more spans for timing in accesscontrol and remove permission deduplicating code after benchmarking --------- Signed-off-by: Dave Henderson <dave.henderson@grafana.com> Co-authored-by: Dave Henderson <dave.henderson@grafana.com> Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	11 months ago
Josh Hunt	52ea6236d4	E2C: Set up page route so cloud-migrations doesn't 404 (#89947)	11 months ago
Karl Persson	e568b86ac0	Zanzana: Initial work to allow partial data migrations (#89919) ... * Zanana: Add Write method to interface * Zanzana: Add utilities for translating RBAC to openFGA tuple keys * RBAC: Add zanzana synchronizer * Run zanzana sync in access controll provider	11 months ago
Andres Martinez Gotor	a22c1ae424	Chore: Remove provisional APIVersion from plugin info (#89831)	11 months ago
Jeff Levin	ed13959e33	Optimize memory allocations in permissions cache (#89645) ... This PR reduces the number of allocations made while caching permissions from the database, fixes the hierarchy of spans and adds new spans for tracing. --------- Signed-off-by: Dave Henderson <dave.henderson@grafana.com> Co-authored-by: Dave Henderson <dave.henderson@grafana.com>	11 months ago
Marcus Andersson	04f39457cf	Chore: Remove sensitive information from presigned URLs prior to logging (#87035) ... Co-authored-by: Will Browne <wbrowne@users.noreply.github.com> Co-authored-by: Dan Cech <dcech@grafana.com> Co-authored-by: Andres Martinez Gotor <andres.martinez@grafana.com>	11 months ago
Ryan McKinley	27e800768e	K8s: Improve identity mapping setup (#89450)	11 months ago
Laura Benz	34b3dbdbf3	RestoreDashboards: Adjust path (#89233) ... * refactor: change path * fix: page headline * refactor: remove condition	11 months ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116)	12 months ago
Ashley Harrison	822644714a	Navigation: Remove `ApplyAdminIA` logic (#89113) ... make admin IA more normal	12 months ago
Aaron Godin	59a6a6513f	Prevent moving a k6 folder (#88884) ... * iam-716 - prevent a folder move operation when the folder's uid or any of its parents uids begin with k6-app * fox folder move check and only list non-k6 folders to users * adding tests for moving * add a test for listing folders * fix the other tests * use method that adds folder parent --------- Co-authored-by: IevaVasiljeva <ieva.vasiljeva@grafana.com>	12 months ago
Marcus Efraimsson	fe3e5917f1	Plugins: Preserve trailing slash in plugin proxy (#86859) ... * Plugins: Preserve trailing slash in plugin proxy * enable toggle by default	12 months ago
Andres Martinez Gotor	60ce523b72	Refactor plugin context initialization (#88343)	1 year ago
Tim Levett	b5cf90ce78	API: Add in theme support to /render/* endpoint (#88304) ... add in theme support to render endpoint	1 year ago
Ryan McKinley	ffc2702552	Plugins: Support Admission validation hooks (#87718)	1 year ago
Juan Cabanas	a85c1b69d5	PublicDashboards: Remove publicDashboardUid from DashboardMeta (#85126)	1 year ago
Ieva	bd2b248f0e	RBAC: Clean up action set code (#88147) ... * remove unused action set code, refactor the existing code * fix import ordering * use a separate interface for permission expansion after all, to avoid circular dependencies * add comments, fix a test	1 year ago
Mathieu Parent	b8c9ae0eb7	OIDC: Support Generic OAuth org to role mappings (#87394) ... * Social: link to OrgRoleMapper * OIDC: support Generic Oauth org to role mappings Fixes: #73448 Signed-off-by: Mathieu Parent <math.parent@gmail.com> * Handle when getAllOrgs fails in the org_role_mapper * Add more tests * OIDC: ensure orgs are evaluated from API when not from token Signed-off-by: Mathieu Parent <math.parent@gmail.com> * OIDC: ensure AutoAssignOrg is applied with OrgMapping without RoleAttributeStrict Signed-off-by: Mathieu Parent <math.parent@gmail.com> * Extend docs * Fix test, lint --------- Signed-off-by: Mathieu Parent <math.parent@gmail.com> Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com>	1 year ago
Ieva	3e77768144	RBAC: Expand action sets when fetching permissions (#87967) ... * logic to expand action set to the underlying actions when permissions are fetched from the DB * updates needed for dependency injection * clean up some code, also deduplicate scopes when grouping scopes and actions * expand on a comment * rename a method	1 year ago
Aaron Godin	0072e4a92d	Update DS Proxy to use RBAC action (#87517) ... iam-team: Update DS Proxy to use RBAC action	1 year ago
Ezequiel Victorero	42d75ac737	Dashboards: Add feature restore dashboards backend (#83131) ... Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>	1 year ago
Andres Martinez Gotor	d8904f3ca4	Add apiVersion to plugin models (#87510)	1 year ago