[v9.5.x] Require alert.notifications:write permissions to test receiv…

…ers and templates (#867) Require alert.notifications:write permissions to test receivers and templates (#865) (cherry picked from commit 3c21ab70075256d4ba8e4fbfdcb15f5a394161fa)
grafana · Jun 6, 2023 · 9db334a · 9db334a
1 parent 342ad7f
commit 9db334a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/services/ngalert/api/authorization.go b/pkg/services/ngalert/api/authorization.go
@@ -170,7 +170,7 @@ func (api *API) authorize(method, path string) web.Handler {
 		eval = ac.EvalPermission(ac.ActionAlertingNotificationsRead)
 	case http.MethodPost + "/api/alertmanager/grafana/config/api/v1/receivers/test":
 		fallback = middleware.ReqEditorRole
-		eval = ac.EvalPermission(ac.ActionAlertingNotificationsRead)
+		eval = ac.EvalPermission(ac.ActionAlertingNotificationsWrite)
 
 	// External Alertmanager Paths
 	case http.MethodDelete + "/api/alertmanager/{DatasourceUID}/config/api/v1/alerts":