Commit Graph

140 Commits

Author SHA1 Message Date
Daniel Vaz Gaspar
c029475f60 fix: chart import validation (#26993) 2024-02-12 17:20:39 -05:00
Vitor Avila
e3da64593f fix(security manager): Users should not have access to all draft dashboards (#27015)
(cherry picked from commit 01e2f8ace3)
2024-02-12 15:58:40 -05:00
Beto Dealmeida
e453059413 fix: prevent guest user from modifying metrics (#26749)
(cherry picked from commit fade4806ce)
2024-02-01 11:33:07 -05:00
Beto Dealmeida
fb64100043 feat(sqlparse): improve table parsing (#26476) 2024-02-01 11:09:44 -05:00
Daniel Vaz Gaspar
b9a92b41d7 fix: create virtual dataset validation (#26625) 2024-01-18 11:58:42 -03:00
Jack Fragassi
61dcc70db4 fix: Use RLS clause instead of ID for cache key (#25229)
(cherry picked from commit fba66c6250)
2023-09-25 09:52:08 -03:00
Jack Fragassi
6a461260fc fix: Allow embedded guest user datasource access with dashboard context (#25081)
(cherry picked from commit 2b8d8da22a)
2023-08-29 08:48:48 -03:00
Zef Lin
7d5cd72e43 fix: dataset update permission out of sync (#25043) 2023-08-29 08:48:28 -03:00
Lily Kuang
55c57b9277 chore: remove CssTemplate and Annotation access from gamma role (#24826)
(cherry picked from commit 6ac906f388)
2023-08-29 08:39:58 -03:00
John Bodley
1af6df3190 fix: Native filter dashboard RBAC aware dataset permission (#25029)
(cherry picked from commit 60889d27ed)
2023-08-22 17:39:55 -03:00
John Bodley
fad872fffb fix: Address regression introduced in #24789 (#25008)
(cherry picked from commit 3f93755be2)
2023-08-21 10:46:15 -03:00
Multazim Deshmukh
7a7fa748f5 fix: remove unused file (#24946)
(cherry picked from commit bcd24936bc)
2023-08-10 13:37:21 -03:00
John Bodley
804cc36080 chore: Refactor dashboard security access (#24804)
(cherry picked from commit 5522facdc6)
2023-08-10 10:12:48 -03:00
John Bodley
c8c7539ff1 fix: Dashboard aware RBAC dataset permission (#24789)
(cherry picked from commit 7397ab36f2)
2023-08-07 16:19:56 -03:00
John Bodley
215b3b5a4b fix: revert "fix(embedded): adding logic to check dataset used by filters (#24808) (#24892)
(cherry picked from commit 9f7f2c60d6)
2023-08-07 16:19:56 -03:00
Vitor Avila
bbe4e016d8 fix(embedded): adding logic to check dataset used by filters (#24808)
(cherry picked from commit 7f9b0380e0)
2023-08-01 10:54:41 -03:00
Beto Dealmeida
60385ed059 fix: embedded dashboard check (#24690)
(cherry picked from commit 9844b15e07)
2023-07-19 10:50:30 -03:00
John Bodley
3e76736874 chore(dao): Organize DAOs according to SIP-92 (#24331)
Co-authored-by: JUST.in DO IT <justin.park@airbnb.com>
2023-06-18 18:32:32 -07:00
Daniel Vaz Gaspar
23bb1c48a1 chore: remove deprecated apis and ENABLE_BROAD_ACTIVITY_ACCESS (#24400) 2023-06-15 22:11:24 +01:00
Daniel Vaz Gaspar
c69634df27 chore: remove deprecated apis on superset, get_or_create_table, sqllab_viz (#24375) 2023-06-14 08:48:29 +01:00
Daniel Vaz Gaspar
c8e958fb7e chore: remove deprecated apis stop_query, queries, search_queries (#24360) 2023-06-13 15:56:06 +01:00
Ville Brofeldt
c09b8c6ec8 chore: remove user registrations menu for non-admins (#24198) 2023-06-13 14:03:58 +03:00
Daniel Vaz Gaspar
93ba59d868 chore: remove deprecated apis estimate_query_cost, results, sql_json, csv (#24359) 2023-06-13 09:31:16 +01:00
John Bodley
a3aacf2527 fix: Address dashboard permission regression in #23586 (#24350) 2023-06-12 11:15:27 -07:00
Michael S. Molina
a7f7f6645d feat: Convert ENABLE_BROAD_ACTIVITY_ACCESS and MENU_HIDE_USER_INFO into feature flags (#24345) 2023-06-12 10:40:22 -07:00
John Bodley
0e3f1f638c chore: Remove deprecated ENABLE_ACCESS_REQUEST workflow (#24266) 2023-06-09 18:54:31 -07:00
John Bodley
9adb023880 chore(druid): Remove legacy Druid NoSQL logic (#23997) 2023-06-09 15:33:23 -03:00
John Bodley
a4d5d7c6b9 chore(pre-commit): Add pyupgrade and pycln hooks (#24197) 2023-06-01 12:01:10 -07:00
John Bodley
d583ca9ef5 chore: Embrace the walrus operator (#24127) 2023-05-19 00:37:13 -07:00
Jack Fragassi
8bd432274a chore(api v1): Deprecate superset/override_role_permissions endpoint (#23714) 2023-04-18 11:09:39 -07:00
Ville Brofeldt
a8230336ff fix(dashboard-rbac): use normal rbac when no roles chosen (#23586) 2023-04-07 09:53:35 +03:00
Hugh A. Miles II
8fa77adf9a chore: Hugh/migrate estimate query cost to v1 (#23226)
Co-authored-by: Diego Medina <diegomedina24@gmail.com>
2023-03-17 18:02:25 -06:00
Beto Dealmeida
42e8d1b498 chore: improve schema security (#23385) 2023-03-17 08:05:50 -07:00
Beto Dealmeida
1b95da7487 fix: table schema permissions (#23356) 2023-03-14 15:18:18 -07:00
Hugh A. Miles II
b820eb8235 chore: Update pre-commit packages (#23173) 2023-03-13 17:05:13 -06:00
Ville Brofeldt
89576f8a87 fix(rbac): show objects accessible by database access perm (#23118) 2023-02-24 10:45:16 +02:00
Daniel Vaz Gaspar
d4362a3676 fix: reorganize role permissions (#23096) 2023-02-21 10:19:42 +00:00
Josh Soref
dec6ac49f6 chore(backend): Spelling (#19677)
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
Co-authored-by: Josh Soref <jsoref@users.noreply.github.com>
Co-authored-by: Evan Rusackas <evan@preset.io>
2023-02-17 10:48:24 -07:00
Daniel Vaz Gaspar
c39cf36d27 fix: css template permissions for gamma role (#23083) 2023-02-15 15:26:02 +00:00
Jack Fragassi
54f7a248a6 chore: deprecate /superset/filter/... endpoint, migrate to apiv1 (#22882) 2023-01-30 11:02:49 +00:00
Artem Shumeiko
f3696ceef3 chore: Localization of several charts and elements (#22150)
Co-authored-by: ashumeiko <ashumeiko@ashumeiko.com>
2023-01-11 09:42:54 -07:00
Ville Brofeldt
5b2ca97341 fix(sqllab): remove link to sqllab if missing perms (#22566) 2023-01-09 14:02:36 +02:00
Ville Brofeldt
4c1777f20d fix(alerts): restrict list view and gamma perms (#21765) 2022-10-15 10:03:26 +03:00
Daniel Vaz Gaspar
ab7cfec975 feat: new config to filter specific users from dropdown lists (#21515) 2022-09-29 12:30:07 +01:00
Daniel Vaz Gaspar
7e2e8b8ad9 fix: dataset after insert when db relation does not exist (#21492) 2022-09-17 17:16:18 +01:00
Daniel Vaz Gaspar
64d216adb3 fix: permission sqlalchemy events (#21454) 2022-09-13 13:56:59 -07:00
Zef Lin
286474c3d8 fix: revert permission refactoring PR (#21313) 2022-09-06 19:18:22 +01:00
Daniel Vaz Gaspar
3f2e894af3 fix: dataset name change and permission change (#21161)
* fix: dataset name change and permission change
2022-08-31 18:11:03 +01:00
Daniel Vaz Gaspar
6223042050 fix: SQLAlchemy coercing subquery warning on RLS (#21257) 2022-08-31 08:16:57 +01:00
Shubham Sinha
d408393ba9 fixed guest role permissions (#21208) 2022-08-28 09:08:41 +02:00