mirror of
https://github.com/apache/superset.git
synced 2026-04-21 17:14:57 +00:00
fix(security): grant TableSchemaView to only sql_lab role (#32340)
This commit is contained in:
@@ -307,7 +307,6 @@ class SupersetSecurityManager( # pylint: disable=too-many-public-methods
|
||||
"Manage",
|
||||
"Queries",
|
||||
"ReportSchedule",
|
||||
"TableSchemaView",
|
||||
}
|
||||
|
||||
ALPHA_ONLY_PMVS = {
|
||||
@@ -376,6 +375,9 @@ class SupersetSecurityManager( # pylint: disable=too-many-public-methods
|
||||
("menu_access", "Query Search"),
|
||||
("can_read", "SqlLabPermalinkRestApi"),
|
||||
("can_write", "SqlLabPermalinkRestApi"),
|
||||
("can_post", "TableSchemaView"),
|
||||
("can_expanded", "TableSchemaView"),
|
||||
("can_delete", "TableSchemaView"),
|
||||
}
|
||||
|
||||
SQLLAB_EXTRA_PERMISSION_VIEWS = {
|
||||
|
||||
Reference in New Issue
Block a user