Pre-release, same channel as 11.0.378.
Agent subscription writes (POST/PUT/DELETE /api/v4/agents/subscriptions) and DELETE /api/v4/alerts now require an admin. A non-admin session gets 403 and the data is left unchanged. POST /api/v4/alerts stays available to any authenticated caller, including a Grafana Auth-Token webhook. Admin API tokens need user_object.user_group set to admin.
Also in this tag, since 11.0.378:
- The homer-core package service runs as user
homer. - Session Info includes static SDP codecs and the negotiated answer.
- Lua correlation runs one script at a time across ingest workers.
What's Changed
- feat(package): run the homer-core service as user homer by @adubovikov in #1122
- fix(callinfo): include static SDP codecs and the negotiated answer by @adubovikov in #1125
- fix(scripting): serialize Lua execution across ingest workers by @adubovikov in #1128
- fix(security): require admin to change agent subscriptions and wipe alerts by @adubovikov in #1129
Full Changelog: 11.0.378...11.0.381