QT/superset2
1
0
Fork 0
mirror of https://github.com/apache/superset.git synced 2026-09-01 13:01:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
22,300 Commits 601 Branches 564 Tags
176257e42a1d2b5f2decfaa16802da59cdc2b126
Commit Graph
74 Commits
Author SHA1 Message Date
Hans Yu 1ca5e61f54 chore: Unset future flag in engines and sessions. (#43273) 2026-08-20 10:58:37 -07:00
Amin GhadersohiandClaude Fable 5 086b4af65d feat(mcp): per-resource token scopes with user-permission intersection (#42297) 
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-08-18 13:11:27 -04:00
Evan RusackasClaude Sonnet 5Joe Li
 		fd063d17bf fix(security): harden account password-change and session-invalidation handling (#42934) 
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Joe Li <joe@preset.io>
 2026-08-18 17:40:08 +01:00
Evan RusackasClaude Opus 4.8Superset Dev
 		13eb47a1da fix(api): improved request handling and embedded dashboard scoping (#42930) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Superset Dev <dev@superset.apache.org>
 2026-08-17 23:50:25 -07:00
Evan RusackasandClaude Opus 4.8 59361581cd fix(embedded): restore chart rendering for guest dashboards (#43095) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-13 05:38:57 -07:00
Evan RusackasandClaude Opus 4.8 01ecefd732 fix(security_manager): stop SupersetAuthView from shadowing AUTH_REMOTE_USER (#42949) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-12 18:09:46 -07:00
Mike MaandEvan Rusackas 2eb1e04283 fix: hydrate JWT user before list API filters (#39946) 
Co-authored-by: Evan Rusackas <evan@preset.io>
 2026-08-10 14:18:28 -07:00
Greg NeighborsGreg NeighborsClaude Opus 4.8Greg Neighbors
 		4a587b8539 feat(security): actionable, request-access-aware data permission errors (#41843) 
Co-authored-by: Greg Neighbors <gregneighbors@Gregs-Air-2.lan>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: Greg Neighbors <gregneighbors@Gregs-MacBook-Air-2.local>
 2026-08-08 11:51:15 -07:00
Evan RusackasandClaude Code 2ecce20e48 chore(viz): remove legacy explore_json + viz.py pipeline (#41714) 
Co-authored-by: Claude Code <noreply@anthropic.com>
 2026-08-06 13:22:15 -07:00
Enzo MartellucciandClaude Opus 4.8 069605828d feat(subjects): scope principal listings and default new assets to creator groups (#42472) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-29 14:36:45 +02:00
Joe LiandClaude Opus 4.8 1d752a0ced fix(embedded): load guest charts with missing or stale query_context (#42150) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-27 14:14:55 -07:00
Hans YuEvan RusackasClaude Fable 5
 		8f8331f656 chore: session enforce sqlalchemy 2.0 (#42365) 
Co-authored-by: Evan Rusackas <evan@rusackas.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-07-26 19:28:42 -07:00
Evan RusackasandClaude Code 206fe7ab12 fix(embedded): stop rejecting guest chart data built from control-specific params keys (#42295) 
Co-authored-by: Claude Code <noreply@anthropic.com>
 2026-07-23 13:31:04 -07:00
Hans Yu 19159d58c8 refactor: engine enforce SQLAlchemy 2.0 (#42277) 2026-07-22 11:11:48 -07:00
Evan RusackasandClaude Code 13d38a9cbd test(security): assert intended trailing-slash behavior of security API (#29934) (#41965) 
Co-authored-by: Claude Code <noreply@anthropic.com>
 2026-07-15 22:24:15 -07:00
Gabriel Torres Ruiz 1fd43ffe52 feat(mcp): scope embedded-guest data reads to the token's dashboards (#41753) 2026-07-09 14:58:01 -03:00
Ville Brofeldt 33f0fc93ed feat: introduce Subject model and entity editors/viewers (#38831) 2026-07-08 11:00:03 -07:00
Yuriy KrasilnikovAmin GhadersohiClaude Fable 5
 		ab0e77c1cb fix(embedded): allow guest users to sort by visible columns (#37371) 
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 15:50:56 -07:00
Amin Ghadersohi c3f5e997a1 feat(mcp): chart type plugin registry for extensible generate_chart (#39922) 2026-07-02 00:31:19 -04:00
Evan RusackasAmin GhadersohiClaude Fable 5
 		4b9b8187b3 fix(config): make Swagger UI opt-in (off by default) (#41300) 
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-06-25 10:34:28 -07:00
Evan RusackasandClaude Code 0fd244b5c6 fix(security): reject unknown fields on guest-token RLS rules (#41217) 
Co-authored-by: Claude Code <noreply@anthropic.com>
 2026-06-24 16:16:43 -07:00
Ville Brofeldt b061b5d317 chore: fix lint on untouched files (#41333) 2026-06-23 11:29:19 -07:00
Evan RusackasAmin GhadersohiClaude Fable 5
 		386893f9f2 feat(security): record audit metadata on guest token issuance (#41305) 
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-06-23 11:25:44 -07:00
Evan RusackasandClaude Code 5e8a0c0244 fix(embedded): allow guest users to sort table columns in embedded dashboards (#41218) 
Co-authored-by: Claude Code <noreply@anthropic.com>
 2026-06-23 10:10:55 -07:00
Harshit-TiwaryEvanClaude Opus 4.8
 		36781fbf47 fix(i18n): wrap table access error message with gettext for translation (#38489) 
Co-authored-by: Evan <evan@preset.io>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-22 20:28:05 -07:00
Alexandru Soare 6d08e79259 feat(security): Add extension hooks for custom access control, ownership, and asset lifecycle (#40707) 2026-06-16 15:25:03 +03:00
Evan Rusackasdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Claude Fable 5
 		e16bb29faf fix(embedded): allow guests to apply a Time Grain native filter (#32768) (#41017) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-06-15 15:22:21 -07:00
Evan RusackasandClaude Code d120b1c250 feat(security): enforce password complexity policy (min length + common-password blocklist) (#40670) 
Co-authored-by: Claude Code <noreply@anthropic.com>
 2026-06-13 16:31:23 -07:00
Shaitansha174nClaude Opus 4.8
 		aa3d2b9e81 fix(dashboard): validate native-filter data requests against filter targets (#40979) 
Co-authored-by: sha174n <pedro.sousa@preset.io>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-13 19:02:28 +01:00
Evan RusackasandClaude Code 814b72c6f9 feat(security): force password change on first use (opt-in) (#40669) 
Co-authored-by: Claude Code <noreply@anthropic.com>
 2026-06-11 22:23:10 -07:00
Evan RusackasandClaude Code 663b47aa75 feat: support guest-token revocation per embedded dashboard (#40676) 
Co-authored-by: Claude Code <noreply@anthropic.com>
 2026-06-11 19:37:22 -07:00
Evan RusackasandClaude Opus 4.8 9938ee273f feat: terminate active sessions when an account is disabled (#40695) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-11 19:37:13 -07:00
Evan RusackasandClaude Code 5a0e3f15ca feat(embedded): add guest token revocation support (#40671) 
Co-authored-by: Claude Code <noreply@anthropic.com>
 2026-06-10 09:17:30 -07:00
Amin Ghadersohi 7d69f76127 fix(mcp): API key authentication for MCP — transport, validation, and RBAC (#39604) 2026-06-04 15:04:43 -04:00
ShaitanandClaude Sonnet 4.6 faa76f6741 fix(embedding): add optional dataset allowlist to guest tokens (#39302) 
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-03 12:55:09 +01:00
Michael GerberEvan RusackasCopilot Autofix powered by AIClaude Code
 		041ecbc248 fix(embedded): resolve guest user permissions in user_view_menu_names (#39197) 
Co-authored-by: Evan Rusackas <evan@preset.io>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Claude Code <noreply@anthropic.com>
 2026-06-01 10:30:05 -07:00
Beto Dealmeida cb53745d43 feat: semantic layer extension (#37815) 2026-05-05 12:07:46 -04:00
Daniel Vaz GasparandClaude Opus 4.6 5815665cc6 feat: role/user CRUD events and login/logout tracking in the action log (#39121) 
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-04-09 15:55:25 +01:00
Amin GhadersohiClaude Opus 4.6Kamil Gabryjelski
 		811dcb3715 feat(api-keys): add API key authentication via FAB SecurityManager (#37973) 
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Kamil Gabryjelski <kamil.gabryjelski@gmail.com>
 2026-03-24 13:37:26 -04:00
Mehmet Salih Yavuz 95f61bd223 fix: add parent_slice_id for multilayer charts to embed (#38243) 2026-03-12 21:21:43 +03:00
Yuriy Krasilnikov 09e9c6a522 fix(embedded): prevent double RLS application in virtual datasets (#37395) 2026-03-12 14:12:59 +01:00
Hugh A. Miles II 61fbfda501 feat(security): add granular export controls (Phase 1) (#38361) 2026-03-09 16:44:56 -04:00
Kamil Gabryjelski 3e3c9686de perf(dashboard): Batch RLS filter lookups for dashboard digest computation (#37941) 2026-02-16 21:35:55 +01:00
Alexandru Soare 9ea5ded988 fix(dashboard): Prevent fatal error when database connection is unavailable (#37576) 2026-02-06 20:52:17 -08:00
Beto DealmeidaandClaude Opus 4.5 ecb4e483df fix: apply EXCLUDE_USERS_FROM_LISTS to /api/v1/security/users/ (#36742) 
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
 2025-12-23 15:18:34 -08:00
Daniel Vaz GasparandJoe Li a9fb853e3e fix: Bump FAB to 5.X (#33055) 
Co-authored-by: Joe Li <joe@preset.io>
 2025-09-12 09:21:37 +01:00
Maxime BeaucheminandClaude 246181a546 feat(docker): Add pytest support to docker-compose-light.yml (#34373) 
Co-authored-by: Claude <noreply@anthropic.com>
 2025-08-06 00:17:50 -04:00
Maxime Beauchemin 3f8472ca7b chore: move some rules from ruff -> pylint (#34292) 2025-07-24 09:40:49 -07:00
Beto Dealmeida a26e1d822a chore: remove sqlparse (#33564) 2025-06-04 19:31:41 -04:00
Daniel Vaz Gaspar a4bb11c755 chore: bump FAB to 4.7.0 (#33607) 2025-05-29 08:34:00 +01:00