Beto Dealmeida
f3e620cd0f
fix: RLS in virtual datasets ( #36061 )
2025-11-14 14:21:09 -05:00
Mehmet Salih Yavuz
ecfb9f7d7c
fix(row_level_security): Correct api response code for update ( #34672 )
2025-08-13 23:51:10 +03:00
Maxime Beauchemin
cb27d5fe8d
chore: proper current_app.config proxy usage ( #34345 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2025-07-31 19:27:42 -07:00
Maxime Beauchemin
1958df6b83
fix: dataset endpoint /rowlevelsecurity/related/tables doesn't apply filters as expected ( #34192 )
2025-07-17 15:51:03 -07:00
Beto Dealmeida
a26e1d822a
chore: remove sqlparse ( #33564 )
2025-06-04 19:31:41 -04:00
Enzo Martellucci
4f0020d0df
feat(List Roles): Migrate FAB view to React ( #32432 )
...
Co-authored-by: Diego Pucci <diegopucci.me@gmail.com >
2025-04-02 14:06:17 +03:00
Vitor Avila
d79f7b28c2
feat: Update database permissions in async mode ( #32231 )
2025-02-28 21:25:47 -03:00
Maxime Beauchemin
e51b95ffa8
chore: enforce more ruff rules ( #31447 )
...
Co-authored-by: Elizabeth Thompson <eschutho@gmail.com >
2024-12-18 17:41:34 -08:00
Maxime Beauchemin
a849c29288
chore: enable lint PT009 'use regular assert over self.assert.*' ( #30521 )
2024-10-07 13:17:27 -07:00
Beto Dealmeida
0b34197815
fix: don't reformat generated queries ( #30350 )
2024-10-04 11:09:37 -04:00
David Markey
a31a4eebdd
feat(embedded): add hook to allow superset admins to validate guest token parameters ( #30132 )
...
Co-authored-by: David Markey <markey@rapidraitngs.com >
2024-09-10 22:49:56 -06:00
Michael S. Molina
d497dcad41
fix: Security manager incorrect calls ( #29884 )
2024-08-23 11:39:45 -03:00
Hugh A. Miles II
7650c47e72
fix: Gamma users shouldn't be able to create roles ( #29687 )
2024-08-20 20:14:20 -04:00
John Bodley
8fb8199a55
chore(dao/command): Add transaction decorator to try to enforce "unit of work" ( #24969 )
2024-06-28 12:33:56 -07:00
Eyal Ezer
07b2449bd7
refactor: Unify all json.(loads|dumps) usage to utils.json ( #28702 )
...
Co-authored-by: Eyal Ezer <eyal.ezer@ge.com >
2024-05-28 14:17:41 -07:00
Daniel Vaz Gaspar
356a58d5f6
fix: jwt extended broken by flask bump ( #28451 )
2024-05-13 17:51:29 +01:00
Maxime Beauchemin
2d63722150
chore: set up ruff as a new linter/formatter ( #28158 )
2024-04-24 17:19:53 -07:00
John Bodley
bc65c245fe
chore(tests): Remove unnecessary/problematic app contexts ( #28159 )
2024-04-24 13:46:35 -07:00
John Bodley
481a63da55
chore(tests): Remove ineffectual login ( #27149 )
2024-04-09 09:52:02 -07:00
Beto Dealmeida
26d8077e97
chore: improve SQL parsing ( #26767 )
2024-03-13 18:27:01 -04:00
John Bodley
8749d9f386
chore(tests): Remove unnecessary explicit Flask-SQLAlchemy session expunges ( #27136 )
2024-02-17 07:05:22 +13:00
John Bodley
847ed3f5b0
refactor: Ensure Flask framework leverages the Flask-SQLAlchemy session (Phase II) ( #26909 )
2024-02-14 06:20:15 +13:00
Beto Dealmeida
fade4806ce
fix: prevent guest user from modifying metrics ( #26749 )
2024-01-29 12:59:33 -05:00
John Bodley
dd58b31cc4
chore(sqlalchemy): Remove erroneous SQLAlchemy ORM session.merge operations ( #24776 )
2023-11-20 17:25:41 -08:00
Jack Fragassi
fba66c6250
fix: Use RLS clause instead of ID for cache key ( #25229 )
2023-09-18 11:37:35 -07:00
Jack Fragassi
2b8d8da22a
fix: Allow embedded guest user datasource access with dashboard context ( #25081 )
2023-08-28 09:48:21 -07:00
John Bodley
94c595093b
chore: Add explicit ON DELETE CASCADE for dashboard_slices ( #24938 )
2023-08-10 10:56:11 -03:00
John Bodley
5522facdc6
chore: Refactor dashboard security access ( #24804 )
2023-08-09 09:25:58 -07:00
John Bodley
7397ab36f2
fix: Dashboard aware RBAC dataset permission ( #24789 )
2023-08-04 11:53:34 -07:00
John Bodley
9f7f2c60d6
fix: revert "fix(embedded): adding logic to check dataset used by filters ( #24808 ) ( #24892 )
2023-08-04 11:14:57 -07:00
Vitor Avila
7f9b0380e0
fix(embedded): adding logic to check dataset used by filters ( #24808 )
2023-07-31 14:10:57 -07:00
Beto Dealmeida
9844b15e07
fix: embedded dashboard check ( #24690 )
2023-07-13 10:33:12 -07:00
John Bodley
a156816064
chore(command): Condense delete/bulk-delete operations ( #24607 )
...
Co-authored-by: Michael S. Molina <70410625+michael-s-molina@users.noreply.github.com >
2023-07-12 15:45:29 -07:00
John Bodley
3e76736874
chore(dao): Organize DAOs according to SIP-92 ( #24331 )
...
Co-authored-by: JUST.in DO IT <justin.park@airbnb.com >
2023-06-18 18:32:32 -07:00
John Bodley
a4d5d7c6b9
chore(pre-commit): Add pyupgrade and pycln hooks ( #24197 )
2023-06-01 12:01:10 -07:00
Ville Brofeldt
5424b95138
chore: deprecate rls base related filters ( #24128 )
2023-05-19 21:55:05 +03:00
Daniel Vaz Gaspar
97482c57b5
chore: bump werkzeug and Flask ( #23965 )
2023-05-12 15:01:30 +01:00
Daniel Vaz Gaspar
e5f512e348
fix: check sqlalchemy_uri ( #23901 )
2023-05-03 11:14:03 +01:00
Michael S. Molina
f7810b6020
feat(revert): Re-introduces the RLS page ( #23777 )
2023-04-24 13:10:58 -03:00
Hugh A. Miles II
b820eb8235
chore: Update pre-commit packages ( #23173 )
2023-03-13 17:05:13 -06:00
Josh Soref
78ede590ee
chore(frontend): Spelling ( #19676 )
...
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com >
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
Co-authored-by: Josh Soref <jsoref@users.noreply.github.com >
2023-02-02 11:23:11 -07:00
Mayur
8226110be8
fix: revert RESTful apis and react view for RLS ( #22818 )
2023-01-26 18:04:00 -08:00
Mayur
159dcd7e62
feat(RLS): RESTful apis and react view for RLS ( #22325 )
2023-01-09 13:34:20 -07:00
Daniel Vaz Gaspar
60eb1094a4
feat: add name, description and non null tables to RLS ( #20432 )
...
* feat: add name, description and non null tables to RLS
* add validation
* add and fix tests
* fix sqlite migration
* improve default value for name
2022-06-20 13:52:05 +01:00
Lily Kuang
224769bd45
feat(embedded): API get embedded dashboard config by uuid ( #19650 )
...
* feat(embedded): get embedded dashboard config by uuid
* add tests and validation
* remove accidentally commit
* fix tests
2022-04-12 15:14:08 -07:00
David Aaron Suddjian
8e29ec5a66
feat: Embedded dashboard configuration ( #19364 )
...
* embedded dashboard model
* embedded dashboard endpoints
* DRY up using the with_dashboard decorator elsewhere
* wip
* check feature flags and permissions
* wip
* sdk
* urls
* dao option for id column
* got it working
* Update superset/embedded/view.py
* use the curator check
* put back old endpoint, for now
* allow access by either embedded.uuid or dashboard.id
* keep the old endpoint around, for the time being
* openapi
* lint
* lint
* lint
* test stuff
* lint, test
* typo
* Update superset-frontend/src/embedded/index.tsx
* Update superset-frontend/src/embedded/index.tsx
* fix tests
* bump sdk
2022-03-30 12:34:05 -07:00
Ville Brofeldt
a619cb4ea9
chore: upgrade black ( #19410 )
2022-03-29 20:03:09 +03:00
Daniel Vaz Gaspar
f37fc1a7f0
chore: bump majors on celery and Flask ( #19168 )
...
* chore: bump celery, Flask, flask-jwt-extended, pyJWT
* fix pyJWT breaking change
* fix pyJWT breaking change 2
* test
* fixed test
* fixed test
* fixed test
* revert since mypy won't pick the correct signature
* lint 1
* fix test
* fix test
* docs and celery config migration
* bump FAB to 4.0.0rc3, remove AUTH_STRICT_RESPONSE_CODES
* update docs for new celery config keys
* downgrade celery to 5.2.2
* ref FAB to final 4.0.0 release
* remove conflict left over
2022-03-24 09:16:53 +00:00
Karthikeyan Singaravelan
864bafc655
chore: Fix deprecated unittest aliases. ( #19042 )
2022-03-07 09:38:19 +02:00
Lily Kuang
e6ea197e9f
feat(embedded): aud claim and type for guest token ( #18651 )
...
* add aud claim and type for guest token
* update test
* lint
* make jwt audience configurable
* lint
* Apply suggestions from code review
Co-authored-by: David Aaron Suddjian <1858430+suddjian@users.noreply.github.com >
* verify aud
* add tests for aud and type claim
Co-authored-by: David Aaron Suddjian <1858430+suddjian@users.noreply.github.com >
2022-02-14 10:43:35 -08:00
