Commit Graph

74 Commits

Author SHA1 Message Date
Daniel Vaz Gaspar
15cf06699a feat: security, user group support (#32121) 2025-03-04 09:54:12 +00:00
Levis Mbote
2c37ddb2f6 fix(roles): Add SqlLabPermalinkRestApi as default sqlab roles. (#32284) 2025-02-21 15:42:35 -07:00
Daniel Vaz Gaspar
1b375b715c refactor: upload data unification, less permissions and less endpoints (#31959) 2025-01-28 11:09:55 +00:00
Maxime Beauchemin
e51b95ffa8 chore: enforce more ruff rules (#31447)
Co-authored-by: Elizabeth Thompson <eschutho@gmail.com>
2024-12-18 17:41:34 -08:00
Maxime Beauchemin
a849c29288 chore: enable lint PT009 'use regular assert over self.assert.*' (#30521) 2024-10-07 13:17:27 -07:00
Beto Dealmeida
39209c2b40 fix: handle empty catalog when DB supports them (#29840) 2024-08-13 10:08:43 -04:00
Eyal Ezer
07b2449bd7 refactor: Unify all json.(loads|dumps) usage to utils.json (#28702)
Co-authored-by: Eyal Ezer <eyal.ezer@ge.com>
2024-05-28 14:17:41 -07:00
Beto Dealmeida
e90246fd1f feat(SIP-95): permissions for catalogs (#28317) 2024-05-06 11:41:58 -04:00
Maxime Beauchemin
513852b7c3 fix: all_database_access should enable access to all datasets/charts/dashboards (#28205) 2024-05-02 09:25:14 -07:00
Maxime Beauchemin
2d63722150 chore: set up ruff as a new linter/formatter (#28158) 2024-04-24 17:19:53 -07:00
Maxime Beauchemin
e9c0ca545f feat: Slack Avatar integration (#27849) 2024-04-16 08:40:27 -07:00
Daniel Vaz Gaspar
54387b4589 feat: new CSV upload form and API (#27840) 2024-04-15 09:38:51 +01:00
John Bodley
481a63da55 chore(tests): Remove ineffectual login (#27149) 2024-04-09 09:52:02 -07:00
Beto Dealmeida
9022f5c519 feat(SIP-85): OAuth2 for databases (#27631) 2024-04-02 22:05:33 -04:00
Michael S. Molina
8a46694ce9 fix: Missing SQL Lab permission (#27361) 2024-03-01 13:08:39 -05:00
John Bodley
8749d9f386 chore(tests): Remove unnecessary explicit Flask-SQLAlchemy session expunges (#27136) 2024-02-17 07:05:22 +13:00
Daniel Vaz Gaspar
c96e38c07c fix: removes old deprecated sqllab endpoints (#27117) 2024-02-15 15:58:48 +00:00
John Bodley
847ed3f5b0 refactor: Ensure Flask framework leverages the Flask-SQLAlchemy session (Phase II) (#26909) 2024-02-14 06:20:15 +13:00
Geido
595c6ce3e6 chore: Add granular permissions for actions in Dashboard (#27029) 2024-02-09 16:25:32 +02:00
Geido
6c029ce2e8 chore: Add permission to view and drill on Dashboard context (#26798) 2024-01-29 18:28:10 +01:00
Michael S. Molina
f63e66be01 refactor: Removes the deprecated VERSIONED_EXPORT feature flag (#26347) 2024-01-19 15:21:14 -03:00
John Bodley
df79522160 refactor: Ensure Flask framework leverages the Flask-SQLAlchemy session (#26200) 2024-01-18 08:27:29 +13:00
Daniel Vaz Gaspar
8e19f59dd2 fix: create virtual dataset validation (#26625) 2024-01-17 09:11:15 +00:00
Jack Fragassi
2b8d8da22a fix: Allow embedded guest user datasource access with dashboard context (#25081) 2023-08-28 09:48:21 -07:00
Lily Kuang
6ac906f388 chore: remove CssTemplate and Annotation access from gamma role (#24826) 2023-08-24 16:39:56 -07:00
John Bodley
60889d27ed fix: Native filter dashboard RBAC aware dataset permission (#25029) 2023-08-22 09:58:43 -07:00
John Bodley
3f93755be2 fix: Address regression introduced in #24789 (#25008) 2023-08-18 09:27:34 -07:00
John Bodley
7397ab36f2 fix: Dashboard aware RBAC dataset permission (#24789) 2023-08-04 11:53:34 -07:00
John Bodley
1b5a6790f0 chore: Remove obsolete legacy visualizations (#24694) 2023-07-18 08:17:52 -07:00
John Bodley
3e76736874 chore(dao): Organize DAOs according to SIP-92 (#24331)
Co-authored-by: JUST.in DO IT <justin.park@airbnb.com>
2023-06-18 18:32:32 -07:00
Daniel Vaz Gaspar
23bb1c48a1 chore: remove deprecated apis and ENABLE_BROAD_ACTIVITY_ACCESS (#24400) 2023-06-15 22:11:24 +01:00
Daniel Vaz Gaspar
c69634df27 chore: remove deprecated apis on superset, get_or_create_table, sqllab_viz (#24375) 2023-06-14 08:48:29 +01:00
Daniel Vaz Gaspar
ca478bd5c4 chore: remove deprecated apis copy_dash, save_dash and add_slices (#24353) 2023-06-13 15:08:47 +01:00
Daniel Vaz Gaspar
93ba59d868 chore: remove deprecated apis estimate_query_cost, results, sql_json, csv (#24359) 2023-06-13 09:31:16 +01:00
John Bodley
0e3f1f638c chore: Remove deprecated ENABLE_ACCESS_REQUEST workflow (#24266) 2023-06-09 18:54:31 -07:00
John Bodley
69c2cd5f40 chore: Remove unused sliceCanEdit logic (#24312) 2023-06-08 09:19:39 -07:00
Daniel Vaz Gaspar
d4362a3676 fix: reorganize role permissions (#23096) 2023-02-21 10:19:42 +00:00
Daniel Vaz Gaspar
c39cf36d27 fix: css template permissions for gamma role (#23083) 2023-02-15 15:26:02 +00:00
Daniel Vaz Gaspar
7e2e8b8ad9 fix: dataset after insert when db relation does not exist (#21492) 2022-09-17 17:16:18 +01:00
Daniel Vaz Gaspar
64d216adb3 fix: permission sqlalchemy events (#21454) 2022-09-13 13:56:59 -07:00
Zef Lin
286474c3d8 fix: revert permission refactoring PR (#21313) 2022-09-06 19:18:22 +01:00
Zef Lin
c4b6fc5a6a chore: migrate available_domains to api/v1 (#21173) 2022-09-01 16:38:02 +01:00
Daniel Vaz Gaspar
3f2e894af3 fix: dataset name change and permission change (#21161)
* fix: dataset name change and permission change
2022-08-31 18:11:03 +01:00
Bogdan
ed6212a1f9 Reimplement permissions fetching to do it in a single transaction (#21156)
Co-authored-by: Bogdan Kyryliuk <bogdankyryliuk@dropbox.com>
2022-08-23 18:45:39 -07:00
Diego Medina
9291ad5d4c fix: Change dataset name affect data access role set to this dataset (#20574) 2022-08-02 14:06:53 -06:00
Daniel Vaz Gaspar
bfd2a3d79f fix: database permissions on update and delete (avoid orphaned perms) (#20081)
* fix: database permissions on update and delete (avoid orphaned perms)

* fix event transaction

* fix test

* fix lint

* update datasource access permissions

* add tests

* fix import

* fix tests

* update slice and dataset perms also

* fix lint

* fix tests

* fix lint

* fix lint

* add test for edge case, small refactor

* add test for edge case, small refactor

* improve code

* fix lint
2022-08-02 18:28:46 +01:00
John Bodley
f0ca158989 fix: Refactor ownership checks and ensure consistency (#20499)
Co-authored-by: John Bodley <john.bodley@airbnb.com>
2022-07-07 11:04:27 -07:00
Reese
f9109583ce fix: Allow dataset owners to explore their datasets (#20382)
* fix: Allow dataset owners to explore their datasets

* Re-order imports

* Give owners security manager permissions to their datasets

* Update test suite

* Add SqlaTable to is_owner types

* Add owners to datasource mock

* Fix VSCode import error

* Fix merge error
2022-07-06 11:27:50 -03:00
Daniel Vaz Gaspar
f38dd1d42d feat: add hooks on set_perm for new data permissions (#20600)
* feat: add hooks on set_perm for new data permissions

* fix lint
2022-07-06 09:54:18 +01:00
John Bodley
3483446c28 refactor: Cleanup user get_id/get_user_id (#20492)
Co-authored-by: John Bodley <john.bodley@airbnb.com>
2022-06-24 17:57:04 -07:00