Joe Li
47d3425064
test(subdirectory): align test expectations with Superset.route_base=""
...
After Superset.route_base="" (c531185d0a ) and the FAB-link migration
(28b845ead4 ), `url_for` for the core blueprint emits `/dashboard/...`,
`/explore/...`, `/explore_json/...`, `/welcome/...` etc. (no `/superset/`
segment). Likewise the Tag component renders `/all_entities/?id=<id>`,
and rewritePermalinkOrigin substitutes window.location.origin into
backend permalinks at the frontend boundary.
Update test expectations to match:
* Python unit: tests/unit_tests/commands/report/execute_test.py drops
`superset/` from the 12 `dashboard/p/...` expected paths and the
`superset/dashboard/` membership check (kept assertion meaningful
via the existing `dashboard/p/` negative check).
* Python integration: drop `/superset/` from URLs hit by tests and
from URLs asserted against API payloads in core_tests, dashboard_tests,
dashboards/api_tests, event_logger_tests, log_api_tests, security_tests,
strategy_tests, utils_tests, reports/commands_tests,
reports/commands/execute_dashboard_report_tests. Fixed the regex in
test_new_dashboard to match the new Location header shape.
* Jest: ChartList tag-link assertion drops `/superset/`, and
URLShortLinkButton tests assert the rewritten URL
(`${window.location.origin}/123`) the component renders after
rewritePermalinkOrigin, instead of the raw backend `http://fakeurl.com/123 `.
These were called out in PROJECT.md as the queued "integration test sweep
for old `/superset/<endpoint>/` shapes" — this commit closes that item.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-14 19:48:15 -07:00
Beto Dealmeida
edf4d03218
chore: bump rison to 2.0.0 ( #39529 )
2026-04-24 15:52:42 -04:00
Vitor Avila
c7955a38ef
fix: Drill to Detail for Embedded ( #39214 )
...
Co-authored-by: Maxime Beauchemin <maximebeauchemin@gmail.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-09 17:01:48 -03:00
Hugh A. Miles II
61fbfda501
feat(security): add granular export controls (Phase 1) ( #38361 )
2026-03-09 16:44:56 -04:00
Beto Dealmeida
03ad1789f0
feat(alerts/reports): external URL warning ( #35021 )
2026-03-06 11:57:03 -05:00
Amin Ghadersohi
0ecc69d2f1
chore(deps): bump fastmcp from 2.14.0 to 2.14.3 ( #37410 )
2026-01-24 07:03:00 -08:00
Evan Rusackas
5909e90081
feat(security): add built-in Public role for anonymous dashboard access ( #36548 )
...
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
2026-01-05 10:27:10 -08:00
Shunki
440cbc4c1f
fix(roles): Add missing SQLLab permissions for estimate and format ( #36263 )
2025-12-08 14:40:38 -08:00
Daniel Vaz Gaspar
a9fb853e3e
fix: Bump FAB to 5.X ( #33055 )
...
Co-authored-by: Joe Li <joe@preset.io >
2025-09-12 09:21:37 +01:00
Le Xich Long
6d827cf905
fix(security): grant TableSchemaView to only sql_lab role ( #32340 )
2025-08-12 13:45:36 -07:00
Maxime Beauchemin
cb27d5fe8d
chore: proper current_app.config proxy usage ( #34345 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2025-07-31 19:27:42 -07:00
Mehmet Salih Yavuz
a13a590796
feat(User Registrations): Migrate user registrations fab view ( #33631 )
2025-06-25 14:26:21 +02:00
Maxime Beauchemin
dd129fa403
feat(theming): land Ant Design v5 overhaul — dynamic themes, real dark mode + massive styling refactor ( #31590 )
...
Co-authored-by: Enzo Martellucci <52219496+EnxDev@users.noreply.github.com >
Co-authored-by: Diego Pucci <diegopucci.me@gmail.com >
Co-authored-by: Mehmet Salih Yavuz <salih.yavuz@proton.me >
Co-authored-by: Geido <60598000+geido@users.noreply.github.com >
Co-authored-by: Alexandru Soare <37236580+alexandrusoare@users.noreply.github.com >
Co-authored-by: Damian Pendrak <dpendrak@gmail.com >
Co-authored-by: Pius Iniobong <67148161+payose@users.noreply.github.com >
Co-authored-by: Enzo Martellucci <enzomartellucci@gmail.com >
Co-authored-by: Kamil Gabryjelski <kamil.gabryjelski@gmail.com >
2025-06-20 13:38:58 -07:00
Beto Dealmeida
a26e1d822a
chore: remove sqlparse ( #33564 )
2025-06-04 19:31:41 -04:00
Enzo Martellucci
20519158d2
feat(UserInfo): Migrate User Info FAB to React ( #33620 )
2025-06-03 19:24:22 +02:00
Jillian
93fa39a14f
fix(lang): patch FAB's LocaleView to redirect to previous page ( #31692 )
2025-04-15 09:46:06 -07:00
Daniel Vaz Gaspar
15cf06699a
feat: security, user group support ( #32121 )
2025-03-04 09:54:12 +00:00
Levis Mbote
2c37ddb2f6
fix(roles): Add SqlLabPermalinkRestApi as default sqlab roles. ( #32284 )
2025-02-21 15:42:35 -07:00
Daniel Vaz Gaspar
1b375b715c
refactor: upload data unification, less permissions and less endpoints ( #31959 )
2025-01-28 11:09:55 +00:00
Maxime Beauchemin
e51b95ffa8
chore: enforce more ruff rules ( #31447 )
...
Co-authored-by: Elizabeth Thompson <eschutho@gmail.com >
2024-12-18 17:41:34 -08:00
Maxime Beauchemin
a849c29288
chore: enable lint PT009 'use regular assert over self.assert.*' ( #30521 )
2024-10-07 13:17:27 -07:00
Beto Dealmeida
39209c2b40
fix: handle empty catalog when DB supports them ( #29840 )
2024-08-13 10:08:43 -04:00
Eyal Ezer
07b2449bd7
refactor: Unify all json.(loads|dumps) usage to utils.json ( #28702 )
...
Co-authored-by: Eyal Ezer <eyal.ezer@ge.com >
2024-05-28 14:17:41 -07:00
Beto Dealmeida
e90246fd1f
feat(SIP-95): permissions for catalogs ( #28317 )
2024-05-06 11:41:58 -04:00
Maxime Beauchemin
513852b7c3
fix: all_database_access should enable access to all datasets/charts/dashboards ( #28205 )
2024-05-02 09:25:14 -07:00
Maxime Beauchemin
2d63722150
chore: set up ruff as a new linter/formatter ( #28158 )
2024-04-24 17:19:53 -07:00
Maxime Beauchemin
e9c0ca545f
feat: Slack Avatar integration ( #27849 )
2024-04-16 08:40:27 -07:00
Daniel Vaz Gaspar
54387b4589
feat: new CSV upload form and API ( #27840 )
2024-04-15 09:38:51 +01:00
John Bodley
481a63da55
chore(tests): Remove ineffectual login ( #27149 )
2024-04-09 09:52:02 -07:00
Beto Dealmeida
9022f5c519
feat(SIP-85): OAuth2 for databases ( #27631 )
2024-04-02 22:05:33 -04:00
Michael S. Molina
8a46694ce9
fix: Missing SQL Lab permission ( #27361 )
2024-03-01 13:08:39 -05:00
John Bodley
8749d9f386
chore(tests): Remove unnecessary explicit Flask-SQLAlchemy session expunges ( #27136 )
2024-02-17 07:05:22 +13:00
Daniel Vaz Gaspar
c96e38c07c
fix: removes old deprecated sqllab endpoints ( #27117 )
2024-02-15 15:58:48 +00:00
John Bodley
847ed3f5b0
refactor: Ensure Flask framework leverages the Flask-SQLAlchemy session (Phase II) ( #26909 )
2024-02-14 06:20:15 +13:00
Geido
595c6ce3e6
chore: Add granular permissions for actions in Dashboard ( #27029 )
2024-02-09 16:25:32 +02:00
Geido
6c029ce2e8
chore: Add permission to view and drill on Dashboard context ( #26798 )
2024-01-29 18:28:10 +01:00
Michael S. Molina
f63e66be01
refactor: Removes the deprecated VERSIONED_EXPORT feature flag ( #26347 )
2024-01-19 15:21:14 -03:00
John Bodley
df79522160
refactor: Ensure Flask framework leverages the Flask-SQLAlchemy session ( #26200 )
2024-01-18 08:27:29 +13:00
Daniel Vaz Gaspar
8e19f59dd2
fix: create virtual dataset validation ( #26625 )
2024-01-17 09:11:15 +00:00
Jack Fragassi
2b8d8da22a
fix: Allow embedded guest user datasource access with dashboard context ( #25081 )
2023-08-28 09:48:21 -07:00
Lily Kuang
6ac906f388
chore: remove CssTemplate and Annotation access from gamma role ( #24826 )
2023-08-24 16:39:56 -07:00
John Bodley
60889d27ed
fix: Native filter dashboard RBAC aware dataset permission ( #25029 )
2023-08-22 09:58:43 -07:00
John Bodley
3f93755be2
fix: Address regression introduced in #24789 ( #25008 )
2023-08-18 09:27:34 -07:00
John Bodley
7397ab36f2
fix: Dashboard aware RBAC dataset permission ( #24789 )
2023-08-04 11:53:34 -07:00
John Bodley
1b5a6790f0
chore: Remove obsolete legacy visualizations ( #24694 )
2023-07-18 08:17:52 -07:00
John Bodley
3e76736874
chore(dao): Organize DAOs according to SIP-92 ( #24331 )
...
Co-authored-by: JUST.in DO IT <justin.park@airbnb.com >
2023-06-18 18:32:32 -07:00
Daniel Vaz Gaspar
23bb1c48a1
chore: remove deprecated apis and ENABLE_BROAD_ACTIVITY_ACCESS ( #24400 )
2023-06-15 22:11:24 +01:00
Daniel Vaz Gaspar
c69634df27
chore: remove deprecated apis on superset, get_or_create_table, sqllab_viz ( #24375 )
2023-06-14 08:48:29 +01:00
Daniel Vaz Gaspar
ca478bd5c4
chore: remove deprecated apis copy_dash, save_dash and add_slices ( #24353 )
2023-06-13 15:08:47 +01:00
Daniel Vaz Gaspar
93ba59d868
chore: remove deprecated apis estimate_query_cost, results, sql_json, csv ( #24359 )
2023-06-13 09:31:16 +01:00