mirror of
https://github.com/apache/superset.git
synced 2026-04-09 11:25:23 +00:00
b7a0559aaf
* rename key_value to temporary_cache * add migration * create new key_value package * add commands * lots of new stuff * fix schema reference * remove redundant filter state from bootstrap data * add missing license headers * fix pylint * fix dashboard permalink access * use valid json mocks for filter state tests * fix temporary cache tests * add anchors to dashboard state * lint * fix util test * fix url shortlink button tests * remove legacy shortner * remove unused imports * fix js tests * fix test * add native filter state to anchor link * add UPDATING.md section * address comments * address comments * lint * fix test * add utils tests + other test stubs * add key_value integration tests * add filter box state to permalink state * fully support persisting url parameters * lint, add redirects and a few integration tests * fix test + clean up trailing comma * fix anchor bug * change value to LargeBinary to support persisting binary values * fix urlParams type and simplify urlencode * lint * add optional entry expiration * fix incorrect chart id + add test
64 lines
2.2 KiB
Python
64 lines
2.2 KiB
Python
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
from typing import Optional
|
|
|
|
from flask_appbuilder.security.sqla.models import User
|
|
|
|
from superset import security_manager
|
|
from superset.charts.commands.exceptions import (
|
|
ChartAccessDeniedError,
|
|
ChartNotFoundError,
|
|
)
|
|
from superset.charts.dao import ChartDAO
|
|
from superset.datasets.commands.exceptions import (
|
|
DatasetAccessDeniedError,
|
|
DatasetNotFoundError,
|
|
)
|
|
from superset.datasets.dao import DatasetDAO
|
|
from superset.views.base import is_user_admin
|
|
from superset.views.utils import is_owner
|
|
|
|
|
|
def check_dataset_access(dataset_id: int) -> Optional[bool]:
|
|
if dataset_id:
|
|
dataset = DatasetDAO.find_by_id(dataset_id)
|
|
if dataset:
|
|
can_access_datasource = security_manager.can_access_datasource(dataset)
|
|
if can_access_datasource:
|
|
return True
|
|
raise DatasetAccessDeniedError()
|
|
raise DatasetNotFoundError()
|
|
|
|
|
|
def check_access(
|
|
dataset_id: int, chart_id: Optional[int], actor: User
|
|
) -> Optional[bool]:
|
|
check_dataset_access(dataset_id)
|
|
if not chart_id:
|
|
return True
|
|
chart = ChartDAO.find_by_id(chart_id)
|
|
if chart:
|
|
can_access_chart = (
|
|
is_user_admin()
|
|
or is_owner(chart, actor)
|
|
or security_manager.can_access("can_read", "Chart")
|
|
)
|
|
if can_access_chart:
|
|
return True
|
|
raise ChartAccessDeniedError()
|
|
raise ChartNotFoundError()
|