Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Actionsets: cfg to only allow for actionsets as actions #87973

Closed

Conversation

eleijonmarck
Copy link
Contributor

@eleijonmarck eleijonmarck commented May 16, 2024

why

This is an ongoing effort to have a option to only allow for actionsets to be written as part of the actionset work
This is to be able to test out actionsets as the only permissions to be set and used during expansion

what

  • implements a cfg option OnlyAccessActionSets to send through to the setPermissionsQuery
onlyactionsetstored.mov

@eleijonmarck eleijonmarck self-assigned this May 16, 2024
@grafana-delivery-bot grafana-delivery-bot bot added this to the 11.1.x milestone May 16, 2024
Copy link
Contributor

@IevaVasiljeva IevaVasiljeva left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think the check here is in the right place. But I think instead of adding an onlyActionSets field to options for each resource, it might be better to just read that value form the config, and check if permission has prefix dashboards or folders before deciding whether to write the fine grained permissions or not.

pkg/services/accesscontrol/resourcepermissions/options.go Outdated Show resolved Hide resolved
pkg/services/accesscontrol/resourcepermissions/service.go Outdated Show resolved Hide resolved
@eleijonmarck eleijonmarck marked this pull request as ready for review May 16, 2024 21:01
@eleijonmarck eleijonmarck requested review from a team as code owners May 16, 2024 21:01
@eleijonmarck eleijonmarck requested a review from a team as a code owner May 21, 2024 07:59
@eleijonmarck eleijonmarck requested review from jtheory, rwwiv, JacobsonMT, yuri-tceretian and grobinson-grafana and removed request for a team May 21, 2024 07:59
@eleijonmarck eleijonmarck added the no-changelog Skip including change in changelog/release notes label May 21, 2024
Copy link
Contributor

@IevaVasiljeva IevaVasiljeva left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left some questions/suggestions about the logic in comments.

pkg/services/accesscontrol/resourcepermissions/store.go Outdated Show resolved Hide resolved
pkg/services/accesscontrol/resourcepermissions/store.go Outdated Show resolved Hide resolved
pkg/setting/setting.go Outdated Show resolved Hide resolved
@eleijonmarck
Copy link
Contributor Author

closing in favor of PR - #88367

this branch was not able to build enterprise properly

@eleijonmarck eleijonmarck deleted the eleijonmarck/actionsets/cfg-only-access-action-sets branch May 28, 2024 10:14
@grafana-delivery-bot grafana-delivery-bot bot removed this from the 11.1.x milestone May 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/backend no-changelog Skip including change in changelog/release notes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants