Amin Ghadersohi
f48ec58abe
fix(database): mask SSH tunnel credentials explicitly on read paths
...
The SSH tunnel credential fields (password, private_key,
private_key_password) are masked on the write paths (POST/PUT) via
mask_password_info(), but the read paths (GET /<pk> and
GET /<pk>/connection) attached SSHTunnel.data directly, relying solely on
the model property to mask. Apply mask_password_info() on the read paths too
so the masking contract is enforced consistently at the API boundary and is
robust to future changes in SSHTunnel.data.
Adds an integration test asserting the three credential fields are masked on
both read paths while the stored values remain intact.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
2026-06-22 16:58:26 -07:00
Oleg Ovcharuk
d83b0c5ce3
feat: support creating datasets for schema-less databases ( #39433 )
...
Co-authored-by: codeant-ai-for-open-source[bot] <244253245+codeant-ai-for-open-source[bot]@users.noreply.github.com>
2026-05-11 08:30:13 -04:00
Beto Dealmeida
edf4d03218
chore: bump rison to 2.0.0 ( #39529 )
2026-04-24 15:52:42 -04:00
Vitor Avila
8c9efe5659
feat: support for import/export masked_encrypted_extra (backend) ( #38077 )
2026-03-04 11:26:28 -08:00
isaac-jaynes-imperva
3f37cdbf9c
fix(database): include configuration_method in the DB export/import flow ( #36958 )
...
Co-authored-by: codeant-ai-for-open-source[bot] <244253245+codeant-ai-for-open-source[bot]@users.noreply.github.com>
2026-01-23 19:34:52 -03:00
Felipe López
cedc35e39f
fix(SQLLab): remove error icon displayed when writing Jinja SQL even when the script is correct ( #36422 )
2026-01-06 16:58:40 +03:00
Haoqian Zhang
f4b919bf7d
feat(table): Export table data with "Search box" enabled ( #36281 )
...
Co-authored-by: RebeccaH2003 <114100529+RebeccaH2003@users.noreply.github.com >
2025-12-08 20:42:10 -08:00
Beto Dealmeida
c458f99dd4
chore: cleanup ssh tunnel ( #34388 )
2025-12-03 14:26:35 -05:00
Maxime Beauchemin
4695be5cc5
fix: complete theme management system import/export ( #34850 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2025-09-01 15:44:01 -07:00
Maxime Beauchemin
cb27d5fe8d
chore: proper current_app.config proxy usage ( #34345 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2025-07-31 19:27:42 -07:00
Vitor Avila
733f112142
fix: Support metric currency as dict during import ( #34080 )
2025-07-07 14:00:56 -03:00
Beto Dealmeida
f219dc1794
chore: make DB syntax errors 400 ( #33619 )
2025-05-30 13:04:04 -04:00
Vitor Avila
a5a91d5e48
fix(OAuth2): Update connection should not fail if connection is missing OAuth2 token ( #33100 )
2025-04-14 11:19:55 -03:00
Vitor Avila
e35145c816
feat(file uploads): List only allowed schemas in the file uploads dialog ( #32702 )
2025-03-17 23:36:16 -03:00
Vitor Avila
0c6d868483
fix(import): Import a DB connection with expanded rows enabled ( #32657 )
2025-03-14 12:02:39 -03:00
Daniel Vaz Gaspar
15cf06699a
feat: security, user group support ( #32121 )
2025-03-04 09:54:12 +00:00
Beto Dealmeida
5af4e61aff
feat: improve GSheets OAuth2 ( #32048 )
2025-03-03 12:55:54 -05:00
Vitor Avila
d79f7b28c2
feat: Update database permissions in async mode ( #32231 )
2025-02-28 21:25:47 -03:00
Beto Dealmeida
128c45e2d3
fix: prevent nested transactions ( #32401 )
2025-02-28 09:59:03 -05:00
Beto Dealmeida
f4105e9ed2
feat: default ports for SSH tunnel ( #32403 )
2025-02-27 10:59:48 -05:00
Evan Rusackas
90651dfe3e
fix(dev/ci): pre-commit fixes galore ( #32352 )
2025-02-24 11:26:45 -07:00
Daniel Vaz Gaspar
1b375b715c
refactor: upload data unification, less permissions and less endpoints ( #31959 )
2025-01-28 11:09:55 +00:00
Michael S. Molina
687f762457
refactor: Removes the legacy dataset editor ( #31976 )
2025-01-24 14:52:22 -03:00
Maxime Beauchemin
e51b95ffa8
chore: enforce more ruff rules ( #31447 )
...
Co-authored-by: Elizabeth Thompson <eschutho@gmail.com >
2024-12-18 17:41:34 -08:00
Maxime Beauchemin
a849c29288
chore: enable lint PT009 'use regular assert over self.assert.*' ( #30521 )
2024-10-07 13:17:27 -07:00
Elizabeth Thompson
2e5016713a
chore: log warnings for database tables api ( #30410 )
2024-09-30 13:52:17 -07:00
Beto Dealmeida
ff449ad8ab
feat: OAuth2 database field ( #30126 )
2024-09-03 20:57:55 -04:00
Beto Dealmeida
0415ed34ce
feat: allow create/update OAuth2 DB ( #30071 )
2024-09-03 19:22:38 -04:00
Josh Soref
1818054166
chore(tests): Spelling ( #25454 )
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
Co-authored-by: Evan Rusackas <evan@preset.io >
Co-authored-by: John Bodley <4567245+john-bodley@users.noreply.github.com >
2024-08-20 14:47:29 -06:00
Beto Dealmeida
39209c2b40
fix: handle empty catalog when DB supports them ( #29840 )
2024-08-13 10:08:43 -04:00
Beto Dealmeida
61c0970968
fix: create permissions on DB import ( #29802 )
2024-08-06 12:09:21 -04:00
John Bodley
8fb8199a55
chore(dao/command): Add transaction decorator to try to enforce "unit of work" ( #24969 )
2024-06-28 12:33:56 -07:00
John Bodley
9d405738c0
chore(tests): Remove unnecessary mock ( #29386 )
2024-06-27 07:28:50 -07:00
Eyal Ezer
07b2449bd7
refactor: Unify all json.(loads|dumps) usage to utils.json ( #28702 )
...
Co-authored-by: Eyal Ezer <eyal.ezer@ge.com >
2024-05-28 14:17:41 -07:00
Beto Dealmeida
5da6d2bd88
feat: add support for catalogs ( #28416 )
2024-05-16 12:49:31 -04:00
Daniel Vaz Gaspar
9c065951e7
fix: tests on database, dataset, saved_queries apis ( #28397 )
2024-05-09 13:43:31 +01:00
Beto Dealmeida
e90246fd1f
feat(SIP-95): permissions for catalogs ( #28317 )
2024-05-06 11:41:58 -04:00
Daniel Vaz Gaspar
9a339f08a7
feat: new Columnar upload form and API ( #28192 )
2024-05-06 15:51:42 +01:00
Beto Dealmeida
6cf681df68
feat(SIP-95): new endpoint for table metadata ( #28122 )
2024-04-25 12:23:49 -04:00
Maxime Beauchemin
2d63722150
chore: set up ruff as a new linter/formatter ( #28158 )
2024-04-24 17:19:53 -07:00
Daniel Vaz Gaspar
e465876ed4
feat: new Excel upload form and API ( #28105 )
2024-04-19 14:19:42 +01:00
Beto Dealmeida
68a982dfe6
feat(sip-95): new endpoint for extra table metadata ( #28063 )
2024-04-18 10:42:53 -04:00
Daniel Vaz Gaspar
54387b4589
feat: new CSV upload form and API ( #27840 )
2024-04-15 09:38:51 +01:00
Beto Dealmeida
99a1601aea
refactor: rename get_sqla_engine_with_context ( #28012 )
2024-04-12 13:31:05 -04:00
John Bodley
481a63da55
chore(tests): Remove ineffectual login ( #27149 )
2024-04-09 09:52:02 -07:00
John Bodley
30bc8f06dc
chore: Default to engine specification regarding using wildcard ( #27843 )
2024-04-03 09:09:37 -07:00
Michael S. Molina
6e528426dd
feat: Adds option to disable drill to detail per database ( #27536 )
2024-03-21 15:51:09 -03:00
Geido
89e89de341
fix: SSH Tunnel configuration settings ( #27186 )
2024-03-11 16:56:54 +01:00
John Bodley
847ed3f5b0
refactor: Ensure Flask framework leverages the Flask-SQLAlchemy session (Phase II) ( #26909 )
2024-02-14 06:20:15 +13:00
Geido
d8e26cfff1
chore: Remove database ID dependency for SSH Tunnel creation ( #26989 )
2024-02-07 18:03:19 +02:00
