QT/superset2
1
0
Fork 0
mirror of https://github.com/apache/superset.git synced 2026-07-27 17:12:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,582 Commits 552 Branches 561 Tags
f94de107b4ef19ee2b77173350d1d11d11a00244
Commit Graph

219 Commits

Author SHA1 Message Date
Alexandru Soare
57948b865d feat(security): Add extension hooks for custom access control, ownership, and asset lifecycle (#40707) 
(cherry picked from commit 6d08e79259)
 2026-06-26 15:59:54 -07:00
Amin Ghadersohi
f7429845d5 fix(mcp): API key authentication for MCP — transport, validation, and RBAC (#39604) 
(cherry picked from commit 7d69f76127)
 2026-06-05 17:44:00 -07:00
Martyn Gigg
d7a9d99ac0 fix(superset-frontend): Fixes for broken functionality when an application root is defined (#36058) 
(cherry picked from commit e4f649e49c)
 2026-06-01 11:19:22 -07:00
Daniel Vaz Gaspar
f024995424 fix(security): add UserSAMLModelView to USER_MODEL_VIEWS (#39568) 
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-29 09:12:55 -07:00
Vitor Avila
ece8b8ff5b fix: Drill to Detail for Embedded (#39214) 
Co-authored-by: Maxime Beauchemin <maximebeauchemin@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
(cherry picked from commit c7955a38ef)
 2026-04-13 10:16:49 -07:00
Daniel Vaz Gaspar
aa41f8d48c feat: role/user CRUD events and login/logout tracking in the action log (#39121) 
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-04-10 15:25:19 -07:00
Mehmet Salih Yavuz
8d24548b52 fix: add parent_slice_id for multilayer charts to embed (#38243) 
(cherry picked from commit 95f61bd223)
 2026-03-13 12:07:18 -07:00
Joe Li
e272c186f6 perf(security): cache RLS filters per-request to avoid repeated DB queries (#38110) 
(cherry picked from commit 3e3c9686de)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-28 23:33:53 -08:00
Alexandru Soare
4f0680c32e fix(dashboard): Prevent fatal error when database connection is unavailable (#37576) 
(cherry picked from commit 9ea5ded988)
 2026-02-09 09:27:25 -08:00
Beto Dealmeida
ef08904e25 fix: apply EXCLUDE_USERS_FROM_LISTS to /api/v1/security/users/ (#36742) 
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
(cherry picked from commit ecb4e483df)
 2026-01-26 12:40:50 -08:00
Beto Dealmeida
bb7d4ca123 feat: Explorable protocol (#36245) 
(cherry picked from commit 16e6452b8c)
 2026-01-26 12:40:49 -08:00
Amin Ghadersohi
e1d0a9f5f0 fix(security): enable AUTH_RATE_LIMITED to work correctly (#36195) 
Co-authored-by: Joe Li <joe@preset.io>
(cherry picked from commit 92d8139136)
 2026-01-26 12:40:48 -08:00
Shunki
df28ce4deb fix(roles): Add missing SQLLab permissions for estimate and format (#36263) 
(cherry picked from commit 440cbc4c1f)
 2025-12-15 09:17:06 -08:00
Beto Dealmeida
b19372fe16 fix: RLS in virtual datasets (#36061) 
(cherry picked from commit f3e620cd0f)
 2025-11-14 13:58:26 -08:00
Tran Ngoc Tuan
b633bc5577 fix(security-manager): switch from deprecated get_session to session attribute (#35290) 
(cherry picked from commit 04b1a45416)
 2025-10-03 16:33:53 -07:00
Daniel Vaz Gaspar
b2fd9e2fb1 fix: Bump FAB to 5.X (#33055) 
Co-authored-by: Joe Li <joe@preset.io>
(cherry picked from commit a9fb853e3e)
 2025-09-12 17:07:53 -07:00
Michael S. Molina
25775504b9 fix: User-provided Jinja template parameters causing SQL parsing errors (#34802) 
(cherry picked from commit e1234b2264)
 2025-08-23 11:17:15 -07:00
Le Xich Long
6d827cf905 fix(security): grant TableSchemaView to only sql_lab role (#32340) 2025-08-12 13:45:36 -07:00
Vitor Avila
22b44421a4 fix: Fix Slice import on has_drill_by_access (#34644) 2025-08-11 19:51:15 -03:00
Vitor Avila
49689eec6c feat: Enable drilling in embedded (#34319) 2025-08-05 02:23:00 -03:00
Maxime Beauchemin
cb27d5fe8d chore: proper current_app.config proxy usage (#34345) 
Co-authored-by: Claude <noreply@anthropic.com>
 2025-07-31 19:27:42 -07:00
JUST.in DO IT
96cb6030c8 fix(explore): Display missing dataset for denied access (#34129) 2025-07-16 13:36:03 -07:00
Mehmet Salih Yavuz
a13a590796 feat(User Registrations): Migrate user registrations fab view (#33631) 2025-06-25 14:26:21 +02:00
Maxime Beauchemin
dd129fa403 feat(theming): land Ant Design v5 overhaul — dynamic themes, real dark mode + massive styling refactor (#31590) 
Co-authored-by: Enzo Martellucci <52219496+EnxDev@users.noreply.github.com>
Co-authored-by: Diego Pucci <diegopucci.me@gmail.com>
Co-authored-by: Mehmet Salih Yavuz <salih.yavuz@proton.me>
Co-authored-by: Geido <60598000+geido@users.noreply.github.com>
Co-authored-by: Alexandru Soare <37236580+alexandrusoare@users.noreply.github.com>
Co-authored-by: Damian Pendrak <dpendrak@gmail.com>
Co-authored-by: Pius Iniobong <67148161+payose@users.noreply.github.com>
Co-authored-by: Enzo Martellucci <enzomartellucci@gmail.com>
Co-authored-by: Kamil Gabryjelski <kamil.gabryjelski@gmail.com>
 2025-06-20 13:38:58 -07:00
xavier-GitHub76
63cb5807b6 docs: Update STANDARD_ROLES.md, delete 7 permissions "RowLevelSecurityFiltersModelView" (#33670) 
Co-authored-by: Evan Rusackas <evan@preset.io>
 2025-06-20 12:19:30 -06:00
Beto Dealmeida
a26e1d822a chore: remove sqlparse (#33564) 2025-06-04 19:31:41 -04:00
Enzo Martellucci
fa0c5891bf feat(List Groups): Migrate List Groups FAB to React (#33301) 2025-06-03 16:18:15 +02:00
Enzo Martellucci
deef923825 feat(Action Logs): Migrate Action Log FAB to React (#33298) 2025-05-28 14:08:00 +02:00
Enzo Martellucci
013379eb86 feat(List Users): Migrate List Users FAB to React (#32882) 2025-04-15 17:04:28 +03:00
Enzo Martellucci
4f0020d0df feat(List Roles): Migrate FAB view to React (#32432) 
Co-authored-by: Diego Pucci <diegopucci.me@gmail.com>
 2025-04-02 14:06:17 +03:00
Luke Hart
103fedaf92 fix: use role_model from security manager (#32873) 2025-03-27 10:01:14 -07:00
Daniel Vaz Gaspar
15cf06699a feat: security, user group support (#32121) 2025-03-04 09:54:12 +00:00
Levis Mbote
2c37ddb2f6 fix(roles): Add SqlLabPermalinkRestApi as default sqlab roles. (#32284) 2025-02-21 15:42:35 -07:00
Daniel Vaz Gaspar
1b375b715c refactor: upload data unification, less permissions and less endpoints (#31959) 2025-01-28 11:09:55 +00:00
Maxime Beauchemin
e51b95ffa8 chore: enforce more ruff rules (#31447) 
Co-authored-by: Elizabeth Thompson <eschutho@gmail.com>
 2024-12-18 17:41:34 -08:00
Beto Dealmeida
7f2e752796 fix: check orderby (#31156) 2024-11-26 10:15:06 -05:00
github-actions[bot]
b24323d500 chore(🦾): bump python pre-commit 3.7.1 -> 4.0.1 (#31050) 
Co-authored-by: GitHub Action <action@github.com>
Co-authored-by: Maxime Beauchemin <maximebeauchemin@gmail.com>
 2024-11-24 17:34:36 -08:00
Beto Dealmeida
e0172a24b8 fix(embedded): sankey charts (#30491) 2024-10-02 13:45:35 -04:00
Geido
de3af85ee1 feat(Digest): Add RLS at digest generation for Charts and Dashboards (#30336) 
Co-authored-by: Ville Brofeldt <33317356+villebro@users.noreply.github.com>
 2024-09-24 15:39:11 +02:00
Michael S. Molina
d497dcad41 fix: Security manager incorrect calls (#29884) 2024-08-23 11:39:45 -03:00
Hugh A. Miles II
7650c47e72 fix: Gamma users shouldn't be able to create roles (#29687) 2024-08-20 20:14:20 -04:00
Beto Dealmeida
39209c2b40 fix: handle empty catalog when DB supports them (#29840) 2024-08-13 10:08:43 -04:00
Beto Dealmeida
ae0edbfdce chore: add catalog_access to OBJECT_SPEC_PERMISSIONS (#29650) 2024-07-19 19:40:05 -04:00
Beto Dealmeida
fb15278f97 fix: catalog permission check (#29581) 2024-07-12 21:00:13 -04:00
Beto Dealmeida
67df4e3ce3 fix: prevent guest users from changing columns (#29530) 2024-07-10 12:26:51 -04:00
Daniel Vaz Gaspar
241834205f fix: remove info from datasource access error (#29470) 2024-07-08 14:39:20 +01:00
John Bodley
8fb8199a55 chore(dao/command): Add transaction decorator to try to enforce "unit of work" (#24969) 2024-06-28 12:33:56 -07:00
John Bodley
466dda2b14 chore(security): Clean up session/commit logic (#29381) 2024-06-26 12:57:51 -07:00
Elizabeth Thompson
bb9f326f9b chore: change security error level (#28641) 2024-06-05 15:43:22 -07:00
Eyal Ezer
07b2449bd7 refactor: Unify all json.(loads|dumps) usage to utils.json (#28702) 
Co-authored-by: Eyal Ezer <eyal.ezer@ge.com>
 2024-05-28 14:17:41 -07:00