40 lines
839 B
Go
40 lines
839 B
Go
package librarypanels
|
|
|
|
import (
|
|
"github.com/grafana/grafana/pkg/models"
|
|
"github.com/grafana/grafana/pkg/services/dashboards"
|
|
"github.com/grafana/grafana/pkg/services/guardian"
|
|
)
|
|
|
|
func isGeneralFolder(folderID int64) bool {
|
|
return folderID == 0
|
|
}
|
|
|
|
func requirePermissionsOnFolder(user *models.SignedInUser, folderID int64) error {
|
|
if isGeneralFolder(folderID) && user.HasRole(models.ROLE_EDITOR) {
|
|
return nil
|
|
}
|
|
|
|
if isGeneralFolder(folderID) && user.HasRole(models.ROLE_VIEWER) {
|
|
return models.ErrFolderAccessDenied
|
|
}
|
|
|
|
s := dashboards.NewFolderService(user.OrgId, user)
|
|
folder, err := s.GetFolderByID(folderID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
g := guardian.New(folder.Id, user.OrgId, user)
|
|
|
|
canEdit, err := g.CanEdit()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if !canEdit {
|
|
return models.ErrFolderAccessDenied
|
|
}
|
|
|
|
return nil
|
|
}
|