577 Commits (d95eabfeec00a2386a64db9461e119ff0c8ac4f6)

Author	SHA1	Message	Date
bergquist	5596707531	alert: fixes broken link back to grafana ... If Grafana was configured to use a subpath it was included twice in the link from the alert notification back to Grafana. closes #11403	8 years ago
Dan Cech	c0ecdee375	rename Context to ReqContext	8 years ago
Dan Cech	338655dd37	move Context and session out of middleware	8 years ago
Marcus Efraimsson	f44e476580	permissions: fix validation of permissions before update ... Did a bad pointer comparison so extended the tests for duplicate permissions.	8 years ago
Daniel Lee	fe49182b9d	snapshots: fixes cleanup of old snapshots ... Snapshot cleanup did not work due to time.Now syntax error. Added test for it as well to catch any future errors. Added error and debug logging so that it is possible to see any errors in the future. Removed an unused configuration value and deprecated the remove expired snapshots setting.	8 years ago
Marcus Efraimsson	3f588b4c48	dashboards: created/updated and createdby/updatedby should be set before save ... If creating a new folder/dashboard created/updated and createdby/updatedby should always be set. If updating an existing folder/dashboard updated and updatedby should always be set.	8 years ago
Daniel Lee	7d9a9fa29c	snapshots: change to snapshot list query ... Admins can see all snapshots. Other roles can only see their own snapshots. Added permission check for deleting snapshots - admins can delete any snapshot, other roles can delete their own snapshots or snapshots that they have access to via dashboard permissions.	8 years ago
Marcus Efraimsson	a167e19b37	folders: folder api tests	8 years ago
Torkel Ödegaard	3964d6b797	fix: added new known data source plugins, and minor migration fix for v1 dashboards	8 years ago
Marcus Efraimsson	892bdecb19	folders: folder permission api routes	8 years ago
Marcus Efraimsson	268fb4dc6c	folders: new folder service for managing folders	8 years ago
Marcus Efraimsson	53cd39fde5	Shouldn't be able to overwrite a dashboard if you don't have permissions (#10900) ... * dashboards: new command for validating dashboard before update Removes validation logic from saveDashboard and later on use the new command for validating dashboard before saving a dashboard. This due to the fact that we need to validate permissions for overwriting other dashboards by uid and title. * dashboards: use the new command for validating dashboard before saving Had to refactor dashboard provisioning a bit to be able to sidetrack the permission validation in a somewhat reasonable way. Adds some initial tests of the dashboard repository, but needs to be extended later. At least now you can mock the dashboard guardian * dashboards: removes validation logic in the save dashboard api layer Use the dashboard repository solely for create/update dashboards and let it do all the validation. One exception regarding quota validation which still is in api layer since that logic is in a macaron middleware. Need to move out-commented api tests later. * dashboards: fix database tests for validate and saving dashboards * dashboards: rename dashboard repository to dashboard service Split the old dashboard repository interface in two new interfaces, IDashboardService and IDashboardProvisioningService. Makes it more explicit when using it from the provisioning package and there's no possibility of calling an incorrect method for saving a dashboard. * database: make the InitTestDB function available to use from other packages * dashboards: rename ValidateDashboardForUpdateCommand and some refactoring * dashboards: integration tests of dashboard service * dashboard: fix sqlstore test due to folder exist validation * dashboards: move dashboard service integration tests to sqlstore package Had to move it to the sqlstore package due to concurrency problems when running against mysql and postgres. Using InitTestDB from two packages added conflicts when clearing and running migrations on the test database * dashboards: refactor how to find id to be used for save permission check * dashboards: remove duplicated dashboard tests * dashboards: cleanup dashboard service integration tests * dashboards: handle save dashboard errors and return correct http status * fix: remove log statement * dashboards: import dashboard should use dashboard service Had to move alerting commands to models package due to problems with import cycles of packages. * dashboards: cleanup dashboard api tests and add some tests for post dashboard * dashboards: rename dashboard service interfaces * dashboards: rename dashboard guardian interface	8 years ago
Leonard Gram	0053be9882	login: uses epochs for login throtting. ... Closes #10937	8 years ago
Torkel Ödegaard	5323971c21	refactoring: alert rule query refactoring (#10941)	8 years ago
Daniel Lee	b9d572bdec	teams: adds some validation to the API	8 years ago
Leonard Gram	fa1b92a12b	provisioning: uses unix epoch timestamps. (#10907) ... * provisioning: uses unix epoch timestamps.	8 years ago
Torkel Ödegaard	fcaa8227a6	Dashboard acl query fixes (#10909) ... * initial fixes for dashboard permission acl list query, fixes #10864 * permissions: refactoring of acl api and query	8 years ago
Marcus Efraimsson	e1e0b5f951	teams: use orgId in all team and team member operations (#10862) ... Also fixes issue in org users tests for postgres	8 years ago
bergquist	59cd2d5102	provisioning: avoid caching and use updated field from db	8 years ago
Marcus Efraimsson	a86f2fa34b	user picker should only include users from current org (#10845)	8 years ago
Torkel Ödegaard	8e8f3c4332	dashboard and folder search with permissions	8 years ago
Marcus Efraimsson	0e8377a9f4	Update logic for create/update dashboard, validation and plugin dashboard links (#10809) ... * enables overwrite if dashboard allready exist in folder * dashboard: Don't allow creating a folder named General * dashboards: update logic for save/update dashboard No id and uid creates a new dashboard/folder. No id and uid, with an existing title in folder allows overwrite of dashboard. Id without uid, allows update of existing dashboard/folder without overwrite. Uid without id allows update of existing dashboard/folder without overwrite. Id without uid, with an existing title in folder allows overwrite of dashboard/folder and updated will have the uid of overwritten. Uid without id, with an existing title in folder allows overwrite of dashboard/folder and new will have the same uid as provided. Trying to change an existing folder to a dashboard yields error. Trying to change an existing dashboard to a folder yields error. * dashboards: include folder id when confirmed to save with overwrite * dashboards: fixes due to new url structure Return importedUrl property in response to importing dashboards and getting plugin dashboards and use this for redirects/links in the frontend.	8 years ago
Daniel Lee	2d1bd270fb	Stale permissions (#10768) ... * dashfolders: hide permissions in settings if folder has changed and the dashboard has not been saved yet. Otherwise the use will see stale permissions from the original folder. * dashfolders: return folder url for inherited permissions	8 years ago
Carl Bergquist	cc0cc8dd73	changes to new urlformat for home dashboard (#10738)	8 years ago
Marcus Efraimsson	04a9a650e7	folders: changes and updated tests after merging permissions and new url structure	8 years ago
Marcus Efraimsson	773fff9f1a	folders: changes and updated tests after merging permissions and new url structure	8 years ago
bergquist	fcd86fb24f	make it easier for dashboards to generate ur;	8 years ago
bergquist	992fd37010	alert: use new url format	8 years ago
Marcus Efraimsson	90933b0621	dashboard: refactor logic for retrieving url for folder/dashboard	8 years ago
Marcus Efraimsson	b23560ed5a	dashboards: add validation to delete dashboard by slug ... Validates that there are only one folder/dashboard having that slug, otherwise returns 412 Precondition Failed	8 years ago
bergquist	58cfb23625	retry uid generation	8 years ago
bergquist	7e96052594	ensure dashboard title is unique in folder	8 years ago
bergquist	bb3183f6cd	removes uniqnes check on slug when saving dashboards	8 years ago
Daniel Lee	eb765d288c	alertlist: disable pause button when user does not have permission	8 years ago
Marcus Efraimsson	fd59241e35	dashboards: revert adding api for retrieving uid by slug ... Since we're already have possibility to get a dashboard by slug it makes little sense to have a separate endpoint in api for retrieving uid by slug. #7883	8 years ago
Marcus Efraimsson	4829ea0e9f	util: remove retry logic in shortid_generator ... Use shortid.MustGenerate() instead of shortid.Generate(). Instead of returning errors it will panic.	8 years ago
Marcus Efraimsson	9fb7b887db	dashboards: add url property to dashboard meta and search api responses ... #7883	8 years ago
Marcus Efraimsson	7ee691dc48	dashboards: api for retrieving uid by slug. #7883	8 years ago
Marcus Efraimsson	13d5db7d19	dashboards: add support for retrieving a dashboard by uid ... Introduces new url in api /dashboards/<uid> for fetching dashboard by unique id Leave the old dashboard by slug url /dashboards/db/<slug> for backward compatibility and for supporting fallback WIP for #7883	8 years ago
Marcus Efraimsson	e229f8aea8	dashboards: extract short uid generator to util package. #7883	8 years ago
Marcus Efraimsson	5b35c694dc	dashboard: generate and include uid in dashboard model. #7883	8 years ago
Daniel Lee	f5107d5023	alerting: add permission check in api for pausing alerts	8 years ago
Marcus Efraimsson	f08932b78a	WIP: folder api. #10630	8 years ago
Marcus Efraimsson	3d1c624c12	WIP: Protect against brute force (frequent) login attempts (#10031) ... * db: add login attempt migrations * db: add possibility to create login attempts * db: add possibility to retrieve login attempt count per username * auth: validation and update of login attempts for invalid credentials If login attempt count for user authenticating is 5 or more the last 5 minutes we temporarily block the user access to login * db: add possibility to delete expired login attempts * cleanup: Delete login attempts older than 10 minutes The cleanup job are running continuously and triggering each 10 minute * fix typo: rename consequent to consequent * auth: enable login attempt validation for ldap logins * auth: disable login attempts validation by configuration Setting is named DisableLoginAttemptsValidation and is false by default Config disable_login_attempts_validation is placed under security section #7616 * auth: don't run cleanup of login attempts if feature is disabled #7616 * auth: rename settings.go to ldap_settings.go * auth: refactor AuthenticateUser Extract grafana login, ldap login and login attemp validation together with their tests to separate files. Enables testing of many more aspects when authenticating a user. #7616 * auth: rename login attempt validation to brute force login protection Setting DisableLoginAttemptsValidation => DisableBruteForceLoginProtection Configuration disable_login_attempts_validation => disable_brute_force_login_protection #7616	8 years ago
bergquist	d62d5c7418	provisioning: delete dashboards from db when file is missing	8 years ago
bergquist	ee973a977b	stats: send amount of stars as stats	8 years ago
bergquist	77a4ccb822	dashboards: save provisioning meta data	8 years ago
bergquist	67a9e6a71d	provisioing: add lookup table provisioned dashboards	8 years ago
Daniel Lee	94a54248c1	dashfolders: show folders use can save to in picker ... Instead of returning all folders a user has some sort of access to, this change creates a new end point that returns folders the user has write access to. This new endpoint is used in the folder picker	8 years ago
bergquist	237d469ed4	dashboards as cfg: create dashboard folders if missing ... closes #10259	8 years ago