ossaccesscontrol

Documentation

Index

• Variables
• type DashboardPermissionsService
  • func ProvideDashboardPermissions(cfg *setting.Cfg, router routing.RouteRegister, sql db.DB, ...) (*DashboardPermissionsService, error)
• type DatasourcePermissionsService
  • func ProvideDatasourcePermissionsService() *DatasourcePermissionsService
  • func (e DatasourcePermissionsService) DeleteResourcePermissions(ctx context.Context, orgID int64, resourceID string) error
  • func (e DatasourcePermissionsService) GetPermissions(ctx context.Context, user *user.SignedInUser, resourceID string) ([]accesscontrol.ResourcePermission, error)
  • func (e DatasourcePermissionsService) MapActions(permission accesscontrol.ResourcePermission) string
  • func (e DatasourcePermissionsService) SetBuiltInRolePermission(ctx context.Context, orgID int64, builtInRole string, resourceID string, ...) (*accesscontrol.ResourcePermission, error)
  • func (e DatasourcePermissionsService) SetPermissions(ctx context.Context, orgID int64, resourceID string, ...) ([]accesscontrol.ResourcePermission, error)
  • func (e DatasourcePermissionsService) SetTeamPermission(ctx context.Context, orgID, teamID int64, resourceID, permission string) (*accesscontrol.ResourcePermission, error)
  • func (e DatasourcePermissionsService) SetUserPermission(ctx context.Context, orgID int64, user accesscontrol.User, ...) (*accesscontrol.ResourcePermission, error)
• type FolderPermissionsService
  • func ProvideFolderPermissions(cfg *setting.Cfg, router routing.RouteRegister, sql db.DB, ...) (*FolderPermissionsService, error)
• type ServiceAccountPermissionsService
  • func ProvideServiceAccountPermissions(cfg *setting.Cfg, router routing.RouteRegister, sql db.DB, ...) (*ServiceAccountPermissionsService, error)
• type TeamPermissionsService
  • func ProvideTeamPermissions(cfg *setting.Cfg, router routing.RouteRegister, sql db.DB, ...) (*TeamPermissionsService, error)

Variables

var (
	TeamMemberActions = []string{
		accesscontrol.ActionTeamsRead,
	}

	TeamAdminActions = []string{
		accesscontrol.ActionTeamsRead,
		accesscontrol.ActionTeamsDelete,
		accesscontrol.ActionTeamsWrite,
		accesscontrol.ActionTeamsPermissionsRead,
		accesscontrol.ActionTeamsPermissionsWrite,
	}
)

var (
	ServiceAccountEditActions = []string{
		serviceaccounts.ActionRead,
		serviceaccounts.ActionWrite,
	}
	ServiceAccountAdminActions = []string{
		serviceaccounts.ActionRead,
		serviceaccounts.ActionWrite,
		serviceaccounts.ActionDelete,
		serviceaccounts.ActionPermissionsRead,
		serviceaccounts.ActionPermissionsWrite,
	}
)

var DashboardAdminActions = append(DashboardEditActions, []string{dashboards.ActionDashboardsPermissionsRead, dashboards.ActionDashboardsPermissionsWrite}...)

var DashboardEditActions = append(DashboardViewActions, []string{dashboards.ActionDashboardsWrite, dashboards.ActionDashboardsDelete}...)

var DashboardViewActions = []string{dashboards.ActionDashboardsRead}

var FolderAdminActions = append(FolderEditActions, []string{dashboards.ActionFoldersPermissionsRead, dashboards.ActionFoldersPermissionsWrite}...)

var FolderEditActions = append(FolderViewActions, []string{
	dashboards.ActionFoldersWrite,
	dashboards.ActionFoldersDelete,
	dashboards.ActionDashboardsCreate,
	accesscontrol.ActionAlertingRuleCreate,
	accesscontrol.ActionAlertingRuleUpdate,
	accesscontrol.ActionAlertingRuleDelete,
}...)

var FolderViewActions = []string{dashboards.ActionFoldersRead, accesscontrol.ActionAlertingRuleRead}

Types

type DashboardPermissionsService

type DashboardPermissionsService struct {
	*resourcepermissions.Service
}

func ProvideDashboardPermissions

func ProvideDashboardPermissions(
	cfg *setting.Cfg, router routing.RouteRegister, sql db.DB, ac accesscontrol.AccessControl,
	license licensing.Licensing, dashboardStore dashboards.Store, folderService folder.Service, service accesscontrol.Service,
	teamService team.Service, userService user.Service,
) (*DashboardPermissionsService, error)

type DatasourcePermissionsService

type DatasourcePermissionsService struct{}

func ProvideDatasourcePermissionsService

func ProvideDatasourcePermissionsService() *DatasourcePermissionsService

func (DatasourcePermissionsService) DeleteResourcePermissions

func (e DatasourcePermissionsService) DeleteResourcePermissions(ctx context.Context, orgID int64, resourceID string) error

func (DatasourcePermissionsService) GetPermissions

func (e DatasourcePermissionsService) GetPermissions(ctx context.Context, user *user.SignedInUser, resourceID string) ([]accesscontrol.ResourcePermission, error)

func (DatasourcePermissionsService) MapActions

func (e DatasourcePermissionsService) MapActions(permission accesscontrol.ResourcePermission) string

func (DatasourcePermissionsService) SetBuiltInRolePermission

func (e DatasourcePermissionsService) SetBuiltInRolePermission(ctx context.Context, orgID int64, builtInRole string, resourceID string, permission string) (*accesscontrol.ResourcePermission, error)

func (DatasourcePermissionsService) SetPermissions

func (e DatasourcePermissionsService) SetPermissions(ctx context.Context, orgID int64, resourceID string, commands ...accesscontrol.SetResourcePermissionCommand) ([]accesscontrol.ResourcePermission, error)

func (DatasourcePermissionsService) SetTeamPermission

func (e DatasourcePermissionsService) SetTeamPermission(ctx context.Context, orgID, teamID int64, resourceID, permission string) (*accesscontrol.ResourcePermission, error)

func (DatasourcePermissionsService) SetUserPermission

func (e DatasourcePermissionsService) SetUserPermission(ctx context.Context, orgID int64, user accesscontrol.User, resourceID, permission string) (*accesscontrol.ResourcePermission, error)

type FolderPermissionsService

type FolderPermissionsService struct {
	*resourcepermissions.Service
}

func ProvideFolderPermissions

func ProvideFolderPermissions(
	cfg *setting.Cfg, router routing.RouteRegister, sql db.DB, accesscontrol accesscontrol.AccessControl,
	license licensing.Licensing, dashboardStore dashboards.Store, folderService folder.Service, service accesscontrol.Service,
	teamService team.Service, userService user.Service,
) (*FolderPermissionsService, error)

type ServiceAccountPermissionsService

type ServiceAccountPermissionsService struct {
	*resourcepermissions.Service
}

func ProvideServiceAccountPermissions

func ProvideServiceAccountPermissions(
	cfg *setting.Cfg, router routing.RouteRegister, sql db.DB, ac accesscontrol.AccessControl,
	license licensing.Licensing, serviceAccountRetrieverService *retriever.Service, service accesscontrol.Service,
	teamService team.Service, userService user.Service,
) (*ServiceAccountPermissionsService, error)

type TeamPermissionsService

type TeamPermissionsService struct {
	*resourcepermissions.Service
}

func ProvideTeamPermissions

func ProvideTeamPermissions(
	cfg *setting.Cfg, router routing.RouteRegister, sql db.DB,
	ac accesscontrol.AccessControl, license licensing.Licensing, service accesscontrol.Service,
	teamService team.Service, userService user.Service,
) (*TeamPermissionsService, error)