Daniel Vaz Gaspar
c8e958fb7e
chore: remove deprecated apis stop_query, queries, search_queries ( #24360 )
2023-06-13 15:56:06 +01:00
Ville Brofeldt
c09b8c6ec8
chore: remove user registrations menu for non-admins ( #24198 )
2023-06-13 14:03:58 +03:00
Daniel Vaz Gaspar
93ba59d868
chore: remove deprecated apis estimate_query_cost, results, sql_json, csv ( #24359 )
2023-06-13 09:31:16 +01:00
John Bodley
a3aacf2527
fix: Address dashboard permission regression in #23586 ( #24350 )
2023-06-12 11:15:27 -07:00
Michael S. Molina
a7f7f6645d
feat: Convert ENABLE_BROAD_ACTIVITY_ACCESS and MENU_HIDE_USER_INFO into feature flags ( #24345 )
2023-06-12 10:40:22 -07:00
John Bodley
0e3f1f638c
chore: Remove deprecated ENABLE_ACCESS_REQUEST workflow ( #24266 )
2023-06-09 18:54:31 -07:00
John Bodley
9adb023880
chore(druid): Remove legacy Druid NoSQL logic ( #23997 )
2023-06-09 15:33:23 -03:00
John Bodley
a4d5d7c6b9
chore(pre-commit): Add pyupgrade and pycln hooks ( #24197 )
2023-06-01 12:01:10 -07:00
John Bodley
d583ca9ef5
chore: Embrace the walrus operator ( #24127 )
2023-05-19 00:37:13 -07:00
Jack Fragassi
8bd432274a
chore(api v1): Deprecate superset/override_role_permissions endpoint ( #23714 )
2023-04-18 11:09:39 -07:00
Ville Brofeldt
a8230336ff
fix(dashboard-rbac): use normal rbac when no roles chosen ( #23586 )
2023-04-07 09:53:35 +03:00
Hugh A. Miles II
8fa77adf9a
chore: Hugh/migrate estimate query cost to v1 ( #23226 )
...
Co-authored-by: Diego Medina <diegomedina24@gmail.com >
2023-03-17 18:02:25 -06:00
Beto Dealmeida
42e8d1b498
chore: improve schema security ( #23385 )
2023-03-17 08:05:50 -07:00
Beto Dealmeida
1b95da7487
fix: table schema permissions ( #23356 )
2023-03-14 15:18:18 -07:00
Hugh A. Miles II
b820eb8235
chore: Update pre-commit packages ( #23173 )
2023-03-13 17:05:13 -06:00
Ville Brofeldt
89576f8a87
fix(rbac): show objects accessible by database access perm ( #23118 )
2023-02-24 10:45:16 +02:00
Daniel Vaz Gaspar
d4362a3676
fix: reorganize role permissions ( #23096 )
2023-02-21 10:19:42 +00:00
Josh Soref
dec6ac49f6
chore(backend): Spelling ( #19677 )
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com >
Co-authored-by: Josh Soref <jsoref@users.noreply.github.com >
Co-authored-by: Evan Rusackas <evan@preset.io >
2023-02-17 10:48:24 -07:00
Daniel Vaz Gaspar
c39cf36d27
fix: css template permissions for gamma role ( #23083 )
2023-02-15 15:26:02 +00:00
Jack Fragassi
54f7a248a6
chore: deprecate /superset/filter/... endpoint, migrate to apiv1 ( #22882 )
2023-01-30 11:02:49 +00:00
Artem Shumeiko
f3696ceef3
chore: Localization of several charts and elements ( #22150 )
...
Co-authored-by: ashumeiko <ashumeiko@ashumeiko.com >
2023-01-11 09:42:54 -07:00
Ville Brofeldt
5b2ca97341
fix(sqllab): remove link to sqllab if missing perms ( #22566 )
2023-01-09 14:02:36 +02:00
Ville Brofeldt
4c1777f20d
fix(alerts): restrict list view and gamma perms ( #21765 )
2022-10-15 10:03:26 +03:00
Daniel Vaz Gaspar
ab7cfec975
feat: new config to filter specific users from dropdown lists ( #21515 )
2022-09-29 12:30:07 +01:00
Daniel Vaz Gaspar
7e2e8b8ad9
fix: dataset after insert when db relation does not exist ( #21492 )
2022-09-17 17:16:18 +01:00
Daniel Vaz Gaspar
64d216adb3
fix: permission sqlalchemy events ( #21454 )
2022-09-13 13:56:59 -07:00
Zef Lin
286474c3d8
fix: revert permission refactoring PR ( #21313 )
2022-09-06 19:18:22 +01:00
Daniel Vaz Gaspar
3f2e894af3
fix: dataset name change and permission change ( #21161 )
...
* fix: dataset name change and permission change
2022-08-31 18:11:03 +01:00
Daniel Vaz Gaspar
6223042050
fix: SQLAlchemy coercing subquery warning on RLS ( #21257 )
2022-08-31 08:16:57 +01:00
Shubham Sinha
d408393ba9
fixed guest role permissions ( #21208 )
2022-08-28 09:08:41 +02:00
Bogdan
ed6212a1f9
Reimplement permissions fetching to do it in a single transaction ( #21156 )
...
Co-authored-by: Bogdan Kyryliuk <bogdankyryliuk@dropbox.com >
2022-08-23 18:45:39 -07:00
Diego Medina
9291ad5d4c
fix: Change dataset name affect data access role set to this dataset ( #20574 )
2022-08-02 14:06:53 -06:00
Daniel Vaz Gaspar
bfd2a3d79f
fix: database permissions on update and delete (avoid orphaned perms) ( #20081 )
...
* fix: database permissions on update and delete (avoid orphaned perms)
* fix event transaction
* fix test
* fix lint
* update datasource access permissions
* add tests
* fix import
* fix tests
* update slice and dataset perms also
* fix lint
* fix tests
* fix lint
* fix lint
* add test for edge case, small refactor
* add test for edge case, small refactor
* improve code
* fix lint
2022-08-02 18:28:46 +01:00
John Bodley
e1094e2198
fix: Add migration to add created_by_fk as explicit owner for charts and datasets ( #20617 )
...
* fix: Add migration to add created_by_fk as owner
* Update 2022-07-05_15-48_409c7b420ab0_add_created_by_fk_as_owner.py
Co-authored-by: John Bodley <john.bodley@airbnb.com >
2022-07-26 10:22:19 -07:00
John Bodley
f0ca158989
fix: Refactor ownership checks and ensure consistency ( #20499 )
...
Co-authored-by: John Bodley <john.bodley@airbnb.com >
2022-07-07 11:04:27 -07:00
Reese
f9109583ce
fix: Allow dataset owners to explore their datasets ( #20382 )
...
* fix: Allow dataset owners to explore their datasets
* Re-order imports
* Give owners security manager permissions to their datasets
* Update test suite
* Add SqlaTable to is_owner types
* Add owners to datasource mock
* Fix VSCode import error
* Fix merge error
2022-07-06 11:27:50 -03:00
Daniel Vaz Gaspar
f38dd1d42d
feat: add hooks on set_perm for new data permissions ( #20600 )
...
* feat: add hooks on set_perm for new data permissions
* fix lint
2022-07-06 09:54:18 +01:00
John Bodley
ad308fbde2
chore(rls): Remove passing global username ( #20344 )
...
* chore(rls): Remove passing global username
* Update manager.py
* Update manager.py
* Update manager.py
* Update manager.py
Co-authored-by: John Bodley <john.bodley@airbnb.com >
2022-07-05 10:51:24 -07:00
John Bodley
3483446c28
refactor: Cleanup user get_id/get_user_id ( #20492 )
...
Co-authored-by: John Bodley <john.bodley@airbnb.com >
2022-06-24 17:57:04 -07:00
Hugh A. Miles II
e3e37cb68f
chore: switching out ConnectorRegistry references for DatasourceDAO ( #20380 )
...
* rename and move dao file
* Update dao.py
* add cachekey
* Update __init__.py
* change reference in query context test
* add utils ref
* more ref changes
* add helpers
* add todo in dashboard.py
* add cachekey
* circular import error in dar.py
* push rest of refs
* fix linting
* fix more linting
* update enum
* remove references for connector registry
* big reafctor
* take value
* fix
* test to see if removing value works
* delete connectregistry
* address concerns
* address comments
* fix merge conflicts
* address concern II
* address concern II
* fix test
Co-authored-by: Phillip Kelley-Dotson <pkelleydotson@yahoo.com >
2022-06-21 13:22:39 +02:00
Lily Kuang
ab9f72f1a1
fix(embedded): CSV download for chart ( #20261 )
...
* move postForm to superset client
* lint
* fix lint
* fix type
* update tests
* add tests
* add test for form submit
* add test for request form
* lint
* fix test
* fix tests
* more tests
* more tests
* test
* lint
* more test for postForm
* lint
* Update superset-frontend/packages/superset-ui-core/test/connection/SupersetClientClass.test.ts
Co-authored-by: David Aaron Suddjian <1858430+suddjian@users.noreply.github.com >
* update tests
* remove useless test
* make test cover happy
* make test cover happy
* make test cover happy
* make codecov happy
* make codecov happy
Co-authored-by: David Aaron Suddjian <1858430+suddjian@users.noreply.github.com >
2022-06-17 20:01:08 -07:00
Daniel Vaz Gaspar
b9a98aae79
fix: None dataset and schema permissions ( #20108 )
...
* fix: None dataset and schema permissions
* fix pylint
* add migration and test
* fix migration
2022-05-20 09:40:10 +01:00
Beto Dealmeida
f2881e5bbd
feat: RLS for SQL Lab ( #19999 )
...
* feat: RLS for SQL Lab
* Small fixes
* Pass username to security manager
* Update docstrings
* Add tests
* Remove type from docstring
2022-05-12 11:03:01 -07:00
Elizabeth Thompson
060b5c0e17
chore: remove druid datasource from the config ( #19770 )
...
* remove druid datasource from the config
* remove config related references to DruidDatasource
* Update __init__.py
* Update __init__.py
* Update manager.py
* remove config related references to DruidDatasource
* raise if instance type is not valid
2022-05-04 12:48:48 -07:00
Lily Kuang
224769bd45
feat(embedded): API get embedded dashboard config by uuid ( #19650 )
...
* feat(embedded): get embedded dashboard config by uuid
* add tests and validation
* remove accidentally commit
* fix tests
2022-04-12 15:14:08 -07:00
David Aaron Suddjian
ab3770667c
chore!: remove ROW_LEVEL_SECURITY feature flag (permanently enable) ( #19230 )
...
* permanently turn on rls feature flag
* unused imports
* docs
* docs
* unused import
2022-03-31 14:05:17 -07:00
David Aaron Suddjian
8e29ec5a66
feat: Embedded dashboard configuration ( #19364 )
...
* embedded dashboard model
* embedded dashboard endpoints
* DRY up using the with_dashboard decorator elsewhere
* wip
* check feature flags and permissions
* wip
* sdk
* urls
* dao option for id column
* got it working
* Update superset/embedded/view.py
* use the curator check
* put back old endpoint, for now
* allow access by either embedded.uuid or dashboard.id
* keep the old endpoint around, for the time being
* openapi
* lint
* lint
* lint
* test stuff
* lint, test
* typo
* Update superset-frontend/src/embedded/index.tsx
* Update superset-frontend/src/embedded/index.tsx
* fix tests
* bump sdk
2022-03-30 12:34:05 -07:00
Ville Brofeldt
a619cb4ea9
chore: upgrade black ( #19410 )
2022-03-29 20:03:09 +03:00
David Aaron Suddjian
f9feb1b7f3
allow overriding the guest token PyJWT instance ( #19293 )
2022-03-21 15:51:39 -07:00
Daniel Vaz Gaspar
af91a13670
chore: remove PUBLIC_ROLE_LIKE_GAMMA deprecated config key ( #19274 )
2022-03-21 14:57:38 +00:00
