Skip to content

[MSD benchmark] AuthZService: improve authz caching#2

Open
khaliqgant wants to merge 8 commits into
msd-benchmark-base/grafana/pr-103633from
msd-benchmark/grafana/pr-103633
Open

[MSD benchmark] AuthZService: improve authz caching#2
khaliqgant wants to merge 8 commits into
msd-benchmark-base/grafana/pr-103633from
msd-benchmark/grafana/pr-103633

Conversation

@khaliqgant

Copy link
Copy Markdown

MSD benchmark PR recreated from Martian Code Review Bench.

Source PR: grafana#103633
Dataset: grafana
Original title: AuthZService: improve authz caching

What is this feature?

This PR contains several changes to allow users to fetch newly created dashboards and folders.

The changes are:

  • on client side: remove the use of authLib cache when running authZ service in-proc
  • on server side: add a denial cache to return quickly when we know that a user does not have permission on a specific resource
  • on server side: if permission denial cache is not hit, and the requested resource is not found in cached permissions, requery permissions from the DB

Why do we need this feature?

Otherwise dash/folder creator can't access the dashboard/folder that they've just created.

Who is this feature for?

Grafana users

Which issue(s) does this PR fix?:

Fixes https://github.com/grafana/identity-access-team/issues/1316

IevaVasiljeva and others added 8 commits April 8, 2025 16:09
Co-authored-by: Gabriel MABILLE <gabriel.mabille@grafana.com>
…ches

Co-authored-by: Gabriel MABILLE <gabriel.mabille@grafana.com>
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
@khaliqgant khaliqgant changed the base branch from main to msd-benchmark-base/grafana/pr-103633 May 15, 2026 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants