dashboardApi/auth_check: verify against organization

[xmj]

• api keys endpoint require administrative rights, which we might not want to grant to backup users
• hence, verify authentication against the org endpoint.

[acjohnson]

@ysde Isn't administrative rights required for backups to work? Also it's noted in the README.

@xmj have you tested this change using a non-administrative key?

[acjohnson]

@xmj It looks like datasources cannot be backed up or restored using a non-administrative key/token

[ysde]

Hi @acjohnson Yes, grafana api required admin right to do backups.

[acjohnson]

@ysde Ok I wouldn't recommend merging since it will cause an inconsistent experience

[xmj]

Admin rights are not required to back up dashboards, which was my usecase.

Maybe verify against /org, and require additional rights (verify against /keys perhaps?) for datasource backups?

[acjohnson]

Admin rights are not required to back up dashboards, which was my usecase.

Maybe verify against /org, and require additional rights (verify against /keys perhaps?) for datasource backups?

That could work. Will you be updating this PR to make it work this way?

[acjohnson]

Closing as this would require more research/effort and has not been implemented in this branch