[v11.0.x] RBAC: Fix access checks for interactions with RBAC roles in hosted Grafana #85520
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Backport beb15d9 from #85485
What is this feature?
Only checks global permissions if
RBACSingleOrganization
is not set.Why do we need this feature?
RBACSingleOrganization
is used for cloud instances which always only have a single organization. For instance, whenRBACSingleOrganization
is set, organization admins can update basic roles.Who is this feature for?
HG users
Enterprise counterpart
https://github.com/grafana/grafana-enterprise/pull/6435