fix(security): grant TableSchemaView to only sql_lab role (#32340)

This commit is contained in:
Le Xich Long
2025-08-13 04:45:36 +08:00
committed by GitHub
parent ab13166e41
commit 6d827cf905
3 changed files with 9 additions and 4 deletions

View File

@@ -307,7 +307,6 @@ class SupersetSecurityManager( # pylint: disable=too-many-public-methods
"Manage",
"Queries",
"ReportSchedule",
"TableSchemaView",
}
ALPHA_ONLY_PMVS = {
@@ -376,6 +375,9 @@ class SupersetSecurityManager( # pylint: disable=too-many-public-methods
("menu_access", "Query Search"),
("can_read", "SqlLabPermalinkRestApi"),
("can_write", "SqlLabPermalinkRestApi"),
("can_post", "TableSchemaView"),
("can_expanded", "TableSchemaView"),
("can_delete", "TableSchemaView"),
}
SQLLAB_EXTRA_PERMISSION_VIEWS = {