52 lines
1.1 KiB
Go
52 lines
1.1 KiB
Go
package libraryelements
|
|
|
|
import (
|
|
"github.com/grafana/grafana/pkg/models"
|
|
"github.com/grafana/grafana/pkg/services/dashboards"
|
|
"github.com/grafana/grafana/pkg/services/guardian"
|
|
)
|
|
|
|
func isGeneralFolder(folderID int64) bool {
|
|
return folderID == 0
|
|
}
|
|
|
|
func (l *LibraryElementService) requireSupportedElementKind(kindAsInt int64) error {
|
|
kind := LibraryElementKind(kindAsInt)
|
|
switch kind {
|
|
case Panel:
|
|
return nil
|
|
case Variable:
|
|
return nil
|
|
default:
|
|
return errLibraryElementUnSupportedElementKind
|
|
}
|
|
}
|
|
|
|
func (l *LibraryElementService) requirePermissionsOnFolder(user *models.SignedInUser, folderID int64) error {
|
|
if isGeneralFolder(folderID) && user.HasRole(models.ROLE_EDITOR) {
|
|
return nil
|
|
}
|
|
|
|
if isGeneralFolder(folderID) && user.HasRole(models.ROLE_VIEWER) {
|
|
return models.ErrFolderAccessDenied
|
|
}
|
|
|
|
s := dashboards.NewFolderService(user.OrgId, user, l.SQLStore)
|
|
folder, err := s.GetFolderByID(folderID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
g := guardian.New(folder.Id, user.OrgId, user)
|
|
|
|
canEdit, err := g.CanEdit()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if !canEdit {
|
|
return models.ErrFolderAccessDenied
|
|
}
|
|
|
|
return nil
|
|
}
|