Dashboard: Find dashboards in folders you do not have access to

[volter]

What Grafana version are you using?

5.2.2

What did you do?

I'm trying to grant privileges of a single dashboard inside a folder that also contains other dashboards, without grants.

What was the expected result?

I expected to see that folder on the menu and I expected only that one dashboard to be visible.

What happened instead?

If I'm not granting anything to the folder, the folder won't show. However, the dashboard is available when sharing the URL. If instead I am granting permissions for the folder, all of the dashboards it contains are visible. That makes sense as more generic rules win, like the documentation says. However, granting access for a single dashboard doesn't make much sense if you can not navigate there.

[marefr]

What menu? Could you please include some screenshots which describes your problem and how you've configured your permissions and for what user/team?

[volter]

I created a user who's role is set to "Viewer". I created a team ("interested team") and added this user to it.

A folder called "Folder with secret and not quite as secret dashboards" contains certain "not quite as secret" dashboards I want members of the "interested team" to see.

Neither the team nor the user were granted permissions on the folder, as this would gain them access to all of the dashboards. I therefore only granted permissions on the dashboard to the team.

By "menu" I meant the dashboard search (http://docs.grafana.org/reference/search/). It just won't show the folder, although the team has access to a dashboard inside of it.

[marefr]

Thanks @volter

The first screenshot on top is that when logged in as this new user which is a member of the interested team?

[volter]

No, that's just to illustrate what the Administrator can see. The folder is not visible for the team member at all.

[volter]

Are you still missing information here?

[marefr]

Thanks @volter

[norbertwnuk]

The issue is still there in Grafana 6.0.2, Dashboard level permissions do not override Folder level configuration. Cannot effectively make single dashboard public (e.g. Everyone with Viewer role) in private Folder. That contradicts documentation where permission propagation is described, it was (somehow) working for us in Grafana 5.3.x - it might indicating regression introduced by some bug-fix / back-porting.
The workaround would be to add View access for Everyone with Viewer role on Folder level, since it does not propagate to dashboard level still can mark dashboards selectively plus have Folder visible for all.

[norbertwnuk]

The tweak is already prepared based on the work in: #10339 (#10339 (comment))

[konradgaluszka]

Update. PR solving this is in #16741.

[konradgaluszka]

@torkelo Can this be merged?
The code doesn't change permissions model much, just lets the folders that contain dashboards accessible to user to be returned in query. Also hides edit 'cog' icon for such folders because it does not make sense to see what is inside.
thanks

Edit:
@marefr can you also look? PR solving this is in #16741. I'm not sure what are the chances of having this merged.
Thanks

[jmurraywv]

Has this been resolved?

[github-actions]

This issue has been automatically marked as stale because it has not had activity in the last year. It will be closed in 30 days if no further activity occurs. Please feel free to leave a comment if you believe the issue is still relevant. Thank you for your contributions!

[github-actions]

This issue has been automatically closed because it has not had any further activity in the last 30 days. Thank you for your contributions!