QT/superset2
1
0
Fork 0
mirror of https://github.com/apache/superset.git synced 2026-04-20 00:24:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

[metric] Adding security for restricted metrics (#8175)

Browse Source
This commit is contained in:
John Bodley
2019-10-01 16:52:15 -07:00
committed by GitHub
parent 8c708037e8
commit 05b67673c3
4 changed files with 84 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
superset/views/api.py
View File

@@ -41,7 +41,7 @@ class Api(BaseSupersetView):
params: query_context: json_blob
"""
query_context = QueryContext(**json.loads(request.form.get("query_context")))
security_manager.assert_datasource_permission(query_context.datasource)
security_manager.assert_query_context_permission(query_context)
payload_json = query_context.get_payload()
return json.dumps(
payload_json, default=utils.json_int_dttm_ser, ignore_nan=True