浏览代码

permissions: might have a solution for search

Torkel Ödegaard 7 年之前
父节点
当前提交
4d5a24a6c4
共有 1 个文件被更改,包括 20 次插入0 次删除
  1. 20 0
      pkg/services/sqlstore/sqlbuilder.go

+ 20 - 0
pkg/services/sqlstore/sqlbuilder.go

@@ -24,6 +24,26 @@ func (sb *SqlBuilder) writeDashboardPermissionFilter(user *m.SignedInUser, permi
 		okRoles = append(okRoles, m.ROLE_VIEWER)
 	}
 
+	// SELECT dash.id, dash.title, dash.folder_id
+	// FROM dashboard AS dash
+	// 	LEFT JOIN dashboard folder on folder.id = dash.folder_id
+	// 	LEFT JOIN dashboard_acl AS da ON
+	// 			da.dashboard_id = dash.id OR
+	// 			da.dashboard_id = dash.folder_id OR
+	// 			(
+	// 				-- include default permissions -->
+	// 				da.org_id = -1 AND (folder.has_acl = 0 OR (dash.has_acl = 0 AND  dash.folder_id = 0))
+	// 			)
+	// 	LEFT JOIN team_member as ugm on ugm.team_id =  da.team_id
+	// WHERE
+	// 	 dash.org_id = 5 AND
+	// 	 (
+	// 		da.user_id = 8 or
+	// 		ugm.user_id = 8 or
+	// 		da.role in ('Viewer', 'Editor')
+	// 	) AND
+	// 	da.permission > 1
+	//
 	sb.sql.WriteString(` AND
 	(
 		dashboard.has_acl = ` + dialect.BooleanStr(false) + ` OR