GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

guardian

package

v6.1.6+incompatible Latest Latest Go to latest Published: Apr 29, 2019 License: Apache-2.0 Imports: 5 Imported by: 179

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/grafana/grafana

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func MockDashboardGuardian(mock *FakeDashboardGuardian)
type DashboardGuardian
type FakeDashboardGuardian

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrGuardianPermissionExists = errors.New("Permission already exists")
	ErrGuardianOverride         = errors.New("You can only override a permission to be higher")
)

View Source

var New = func(dashId int64, orgId int64, user *m.SignedInUser) DashboardGuardian {
	return &dashboardGuardianImpl{
		user:   user,
		dashId: dashId,
		orgId:  orgId,
		log:    log.New("dashboard.permissions"),
	}
}

New factory for creating a new dashboard guardian instance

Functions ¶

func MockDashboardGuardian ¶

func MockDashboardGuardian(mock *FakeDashboardGuardian)

Types ¶

type DashboardGuardian ¶

type DashboardGuardian interface {
	CanSave() (bool, error)
	CanEdit() (bool, error)
	CanView() (bool, error)
	CanAdmin() (bool, error)
	HasPermission(permission m.PermissionType) (bool, error)
	CheckPermissionBeforeUpdate(permission m.PermissionType, updatePermissions []*m.DashboardAcl) (bool, error)
	GetAcl() ([]*m.DashboardAclInfoDTO, error)
}

DashboardGuardian to be used for guard against operations without access on dashboard and acl

type FakeDashboardGuardian ¶

type FakeDashboardGuardian struct {
	DashId                           int64
	OrgId                            int64
	User                             *m.SignedInUser
	CanSaveValue                     bool
	CanEditValue                     bool
	CanViewValue                     bool
	CanAdminValue                    bool
	HasPermissionValue               bool
	CheckPermissionBeforeUpdateValue bool
	CheckPermissionBeforeUpdateError error
	GetAclValue                      []*m.DashboardAclInfoDTO
}

func (*FakeDashboardGuardian) CanAdmin ¶

func (g *FakeDashboardGuardian) CanAdmin() (bool, error)

func (*FakeDashboardGuardian) CanEdit ¶

func (g *FakeDashboardGuardian) CanEdit() (bool, error)

func (*FakeDashboardGuardian) CanSave ¶

func (g *FakeDashboardGuardian) CanSave() (bool, error)

func (*FakeDashboardGuardian) CanView ¶

func (g *FakeDashboardGuardian) CanView() (bool, error)

func (*FakeDashboardGuardian) CheckPermissionBeforeUpdate ¶

func (g *FakeDashboardGuardian) CheckPermissionBeforeUpdate(permission m.PermissionType, updatePermissions []*m.DashboardAcl) (bool, error)

func (*FakeDashboardGuardian) GetAcl ¶

func (g *FakeDashboardGuardian) GetAcl() ([]*m.DashboardAclInfoDTO, error)

func (*FakeDashboardGuardian) HasPermission ¶

func (g *FakeDashboardGuardian) HasPermission(permission m.PermissionType) (bool, error)

Source Files ¶

View all Source files

guardian.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL