{"action":"created","issue":{"url":"https://api.github.com/repos/grafana/grafana/issues/13000","repository_url":"https://api.github.com/repos/grafana/grafana","labels_url":"https://api.github.com/repos/grafana/grafana/issues/13000/labels{/name}","comments_url":"https://api.github.com/repos/grafana/grafana/issues/13000/comments","events_url":"https://api.github.com/repos/grafana/grafana/issues/13000/events","html_url":"https://github.com/grafana/grafana/issues/13000","id":352957017,"node_id":"MDU6SXNzdWUzNTI5NTcwMTc=","number":13000,"title":"[Feat] Option to hide datasource credentials from organization admins","user":{"login":"Photon89","id":1191480,"node_id":"MDQ6VXNlcjExOTE0ODA=","avatar_url":"https://avatars2.githubusercontent.com/u/1191480?v=4","gravatar_id":"","url":"https://api.github.com/users/Photon89","html_url":"https://github.com/Photon89","followers_url":"https://api.github.com/users/Photon89/followers","following_url":"https://api.github.com/users/Photon89/following{/other_user}","gists_url":"https://api.github.com/users/Photon89/gists{/gist_id}","starred_url":"https://api.github.com/users/Photon89/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Photon89/subscriptions","organizations_url":"https://api.github.com/users/Photon89/orgs","repos_url":"https://api.github.com/users/Photon89/repos","events_url":"https://api.github.com/users/Photon89/events{/privacy}","received_events_url":"https://api.github.com/users/Photon89/received_events","type":"User","site_admin":false},"labels":[{"id":829806821,"node_id":"MDU6TGFiZWw4Mjk4MDY4MjE=","url":"https://api.github.com/repos/grafana/grafana/labels/comp:%20permissions","name":"comp: permissions","color":"c7def8","default":false},{"id":257656280,"node_id":"MDU6TGFiZWwyNTc2NTYyODA=","url":"https://api.github.com/repos/grafana/grafana/labels/datasource:%20Elasticsearch","name":"datasource: Elasticsearch","color":"85c92c","default":false},{"id":70176319,"node_id":"MDU6TGFiZWw3MDE3NjMxOQ==","url":"https://api.github.com/repos/grafana/grafana/labels/type:%20duplicate","name":"type: duplicate","color":"dddddd","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":11,"created_at":"2018-08-22T13:36:35Z","updated_at":"2018-08-27T13:44:10Z","closed_at":"2018-08-22T16:47:47Z","author_association":"NONE","body":"Please consider the following user case:\r\n\r\nI (Grafana server admin, in short, admin) would like to set up Grafana with Elasticsearch as datasource and give access to it to several organizations org1 and org2.\r\n\r\nElasticsearch has indices specific to those organizations, org1_index1, org1_index2, ... and org2_index1, org2_index2, ...\r\n\r\nEach organization should only have access to its own indices, so I create datasources datasource1 and datasource2 in Grafana with the index names org1* and org2* respectively. \r\n\r\nNow, datasource1 is created by admin in org1 and datasource2 in org2, so each organization admin admin_org1 and admin_org2 can use only the datasource of his organization.\r\n\r\nHowever, admin_org1 and admin_org2 should not be able to access Elasticsearch's database beyond their respective datasource. Therefore they should not be able to read out the Elasticsearch credentials.\r\n\r\nCurrently, however, it is possible for admin_org1 and admin_org2 to read out these credentials using the datasource API. This gives them the ability to access the whole data stored in Elasticsearch.\r\n\r\nJust to be clear, we do not want to have the user management on the Elasticsearch side.\r\n\r\nIt would therefore be great to have an option when configuring a data source to hide the credentials to all users without server admin privileges or even to all users at all.\r\n"},"comment":{"url":"https://api.github.com/repos/grafana/grafana/issues/comments/416231201","html_url":"https://github.com/grafana/grafana/issues/13000#issuecomment-416231201","issue_url":"https://api.github.com/repos/grafana/grafana/issues/13000","id":416231201,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNjIzMTIwMQ==","user":{"login":"Photon89","id":1191480,"node_id":"MDQ6VXNlcjExOTE0ODA=","avatar_url":"https://avatars2.githubusercontent.com/u/1191480?v=4","gravatar_id":"","url":"https://api.github.com/users/Photon89","html_url":"https://github.com/Photon89","followers_url":"https://api.github.com/users/Photon89/followers","following_url":"https://api.github.com/users/Photon89/following{/other_user}","gists_url":"https://api.github.com/users/Photon89/gists{/gist_id}","starred_url":"https://api.github.com/users/Photon89/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Photon89/subscriptions","organizations_url":"https://api.github.com/users/Photon89/orgs","repos_url":"https://api.github.com/users/Photon89/repos","events_url":"https://api.github.com/users/Photon89/events{/privacy}","received_events_url":"https://api.github.com/users/Photon89/received_events","type":"User","site_admin":false},"created_at":"2018-08-27T13:44:10Z","updated_at":"2018-08-27T13:44:10Z","author_association":"NONE","body":"Ah, I see! Thanks for the clarification, I will keep an eye at #2132 and #12757 then!"}}
{"actor":{"display_login":"Photon89"}}