556 Commits (dceac3aa71c2e09aa57fcc97cac04ff5f5e92f71)

Author	SHA1	Message	Date
Marcus Efraimsson	53cd39fde5	Shouldn't be able to overwrite a dashboard if you don't have permissions (#10900) ... * dashboards: new command for validating dashboard before update Removes validation logic from saveDashboard and later on use the new command for validating dashboard before saving a dashboard. This due to the fact that we need to validate permissions for overwriting other dashboards by uid and title. * dashboards: use the new command for validating dashboard before saving Had to refactor dashboard provisioning a bit to be able to sidetrack the permission validation in a somewhat reasonable way. Adds some initial tests of the dashboard repository, but needs to be extended later. At least now you can mock the dashboard guardian * dashboards: removes validation logic in the save dashboard api layer Use the dashboard repository solely for create/update dashboards and let it do all the validation. One exception regarding quota validation which still is in api layer since that logic is in a macaron middleware. Need to move out-commented api tests later. * dashboards: fix database tests for validate and saving dashboards * dashboards: rename dashboard repository to dashboard service Split the old dashboard repository interface in two new interfaces, IDashboardService and IDashboardProvisioningService. Makes it more explicit when using it from the provisioning package and there's no possibility of calling an incorrect method for saving a dashboard. * database: make the InitTestDB function available to use from other packages * dashboards: rename ValidateDashboardForUpdateCommand and some refactoring * dashboards: integration tests of dashboard service * dashboard: fix sqlstore test due to folder exist validation * dashboards: move dashboard service integration tests to sqlstore package Had to move it to the sqlstore package due to concurrency problems when running against mysql and postgres. Using InitTestDB from two packages added conflicts when clearing and running migrations on the test database * dashboards: refactor how to find id to be used for save permission check * dashboards: remove duplicated dashboard tests * dashboards: cleanup dashboard service integration tests * dashboards: handle save dashboard errors and return correct http status * fix: remove log statement * dashboards: import dashboard should use dashboard service Had to move alerting commands to models package due to problems with import cycles of packages. * dashboards: cleanup dashboard api tests and add some tests for post dashboard * dashboards: rename dashboard service interfaces * dashboards: rename dashboard guardian interface	8 years ago
Leonard Gram	0053be9882	login: uses epochs for login throtting. ... Closes #10937	8 years ago
Torkel Ödegaard	5323971c21	refactoring: alert rule query refactoring (#10941)	8 years ago
Daniel Lee	b9d572bdec	teams: adds some validation to the API	8 years ago
Leonard Gram	fa1b92a12b	provisioning: uses unix epoch timestamps. (#10907) ... * provisioning: uses unix epoch timestamps.	8 years ago
Torkel Ödegaard	fcaa8227a6	Dashboard acl query fixes (#10909) ... * initial fixes for dashboard permission acl list query, fixes #10864 * permissions: refactoring of acl api and query	8 years ago
Marcus Efraimsson	e1e0b5f951	teams: use orgId in all team and team member operations (#10862) ... Also fixes issue in org users tests for postgres	8 years ago
bergquist	59cd2d5102	provisioning: avoid caching and use updated field from db	8 years ago
Marcus Efraimsson	a86f2fa34b	user picker should only include users from current org (#10845)	8 years ago
Torkel Ödegaard	8e8f3c4332	dashboard and folder search with permissions	8 years ago
Marcus Efraimsson	0e8377a9f4	Update logic for create/update dashboard, validation and plugin dashboard links (#10809) ... * enables overwrite if dashboard allready exist in folder * dashboard: Don't allow creating a folder named General * dashboards: update logic for save/update dashboard No id and uid creates a new dashboard/folder. No id and uid, with an existing title in folder allows overwrite of dashboard. Id without uid, allows update of existing dashboard/folder without overwrite. Uid without id allows update of existing dashboard/folder without overwrite. Id without uid, with an existing title in folder allows overwrite of dashboard/folder and updated will have the uid of overwritten. Uid without id, with an existing title in folder allows overwrite of dashboard/folder and new will have the same uid as provided. Trying to change an existing folder to a dashboard yields error. Trying to change an existing dashboard to a folder yields error. * dashboards: include folder id when confirmed to save with overwrite * dashboards: fixes due to new url structure Return importedUrl property in response to importing dashboards and getting plugin dashboards and use this for redirects/links in the frontend.	8 years ago
Daniel Lee	2d1bd270fb	Stale permissions (#10768) ... * dashfolders: hide permissions in settings if folder has changed and the dashboard has not been saved yet. Otherwise the use will see stale permissions from the original folder. * dashfolders: return folder url for inherited permissions	8 years ago
Carl Bergquist	cc0cc8dd73	changes to new urlformat for home dashboard (#10738)	8 years ago
bergquist	fcd86fb24f	make it easier for dashboards to generate ur;	8 years ago
bergquist	992fd37010	alert: use new url format	8 years ago
Marcus Efraimsson	90933b0621	dashboard: refactor logic for retrieving url for folder/dashboard	8 years ago
Marcus Efraimsson	b23560ed5a	dashboards: add validation to delete dashboard by slug ... Validates that there are only one folder/dashboard having that slug, otherwise returns 412 Precondition Failed	8 years ago
bergquist	58cfb23625	retry uid generation	8 years ago
bergquist	7e96052594	ensure dashboard title is unique in folder	8 years ago
bergquist	bb3183f6cd	removes uniqnes check on slug when saving dashboards	8 years ago
Daniel Lee	eb765d288c	alertlist: disable pause button when user does not have permission	8 years ago
Marcus Efraimsson	fd59241e35	dashboards: revert adding api for retrieving uid by slug ... Since we're already have possibility to get a dashboard by slug it makes little sense to have a separate endpoint in api for retrieving uid by slug. #7883	8 years ago
Marcus Efraimsson	4829ea0e9f	util: remove retry logic in shortid_generator ... Use shortid.MustGenerate() instead of shortid.Generate(). Instead of returning errors it will panic.	8 years ago
Marcus Efraimsson	9fb7b887db	dashboards: add url property to dashboard meta and search api responses ... #7883	8 years ago
Marcus Efraimsson	7ee691dc48	dashboards: api for retrieving uid by slug. #7883	8 years ago
Marcus Efraimsson	13d5db7d19	dashboards: add support for retrieving a dashboard by uid ... Introduces new url in api /dashboards/<uid> for fetching dashboard by unique id Leave the old dashboard by slug url /dashboards/db/<slug> for backward compatibility and for supporting fallback WIP for #7883	8 years ago
Marcus Efraimsson	e229f8aea8	dashboards: extract short uid generator to util package. #7883	8 years ago
Marcus Efraimsson	5b35c694dc	dashboard: generate and include uid in dashboard model. #7883	8 years ago
Daniel Lee	f5107d5023	alerting: add permission check in api for pausing alerts	8 years ago
Marcus Efraimsson	3d1c624c12	WIP: Protect against brute force (frequent) login attempts (#10031) ... * db: add login attempt migrations * db: add possibility to create login attempts * db: add possibility to retrieve login attempt count per username * auth: validation and update of login attempts for invalid credentials If login attempt count for user authenticating is 5 or more the last 5 minutes we temporarily block the user access to login * db: add possibility to delete expired login attempts * cleanup: Delete login attempts older than 10 minutes The cleanup job are running continuously and triggering each 10 minute * fix typo: rename consequent to consequent * auth: enable login attempt validation for ldap logins * auth: disable login attempts validation by configuration Setting is named DisableLoginAttemptsValidation and is false by default Config disable_login_attempts_validation is placed under security section #7616 * auth: don't run cleanup of login attempts if feature is disabled #7616 * auth: rename settings.go to ldap_settings.go * auth: refactor AuthenticateUser Extract grafana login, ldap login and login attemp validation together with their tests to separate files. Enables testing of many more aspects when authenticating a user. #7616 * auth: rename login attempt validation to brute force login protection Setting DisableLoginAttemptsValidation => DisableBruteForceLoginProtection Configuration disable_login_attempts_validation => disable_brute_force_login_protection #7616	8 years ago
bergquist	d62d5c7418	provisioning: delete dashboards from db when file is missing	8 years ago
bergquist	ee973a977b	stats: send amount of stars as stats	8 years ago
bergquist	77a4ccb822	dashboards: save provisioning meta data	8 years ago
bergquist	67a9e6a71d	provisioing: add lookup table provisioned dashboards	8 years ago
Daniel Lee	94a54248c1	dashfolders: show folders use can save to in picker ... Instead of returning all folders a user has some sort of access to, this change creates a new end point that returns folders the user has write access to. This new endpoint is used in the folder picker	8 years ago
bergquist	237d469ed4	dashboards as cfg: create dashboard folders if missing ... closes #10259	8 years ago
Marcus Efraimsson	af34f9977e	Add avatar to team and team members page (#10305) ... * teams: add db migration for email column in teams table * teams: /teams should render index page with a 200 OK * teams: additional backend functionality for team and team members Possibility to save/update email for teams. Possibility to retrive avatar url when searching for teams. Possibility to retrive avatar url when searching for team members. * teams: display team avatar and team member avatars Possibility to save and update email for a team * teams: create team on separate page instead of modal dialog	8 years ago
Torkel Ödegaard	a8a5f8181b	fix: viewers can edit now works correctly	8 years ago
Torkel Ödegaard	2797e8e2d0	profile: use name or fallback for profile page	8 years ago
bergquist	256f7176a2	teams: add team count when searching for team ... closes #10207	8 years ago
Carl Bergquist	35106537f2	Replace Read Only Editor role with ViewersCanEdit setting (#10166) ... * removes readonly editor role * adds viewersCanEdit setting This enable you to allow viewers to edit/inspect dashboards in grafana in their own browser without allowing them to save dashboards * remove read only editor option from all dropdowns * migrates all read only viewers to viewers * docs: replace readOnlyEditor with viewersCanEdit	8 years ago
Alexander Zobnin	26281dd9d8	refactor: format files by gofmt	8 years ago
bergquist	f7ed24475c	wait for all sub routines to finish ... simple solution for waiting for all go sub routines to finish before closing Grafana. We would use errGroup here as well but I dont like spreading context's all over the place. closes #10131	8 years ago
Alexander Zobnin	5d3bfee2f1	refactor: user groups to teams, rename backend files	8 years ago
Alexander Zobnin	d8612380e9	refactor: rename User Groups to Teams	8 years ago
bergquist	16f072b320	dashboards as cfg: move saving logic for dashboards into its own service	8 years ago
bergquist	d69b63cbc0	dashboards as cfg: read first cfg version	8 years ago
Marcus Efraimsson	a335150ad1	dashfolders: Add a helper for creating a dashboard folder	8 years ago
bergquist	ebbfc529e0	datasource as cfg: support globbing	8 years ago
bergquist	36676e23c1	datasource as cfg: adds readonly datasources	8 years ago