Superset DevandClaude Sonnet 5 176257e42a fix(semantic_layers): check access before returning a layer's configuration ...

Add SemanticLayer.raise_for_access(), mirroring the existing
SemanticView.raise_for_access(), and call it from the layer GET, runtime
schema, and views endpoints before returning or exercising a layer's
decrypted configuration. Previously these endpoints resolved the layer by
UUID with no per-object permission check.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-21 00:38:48 -07:00

..

advanced_data_type

…

annotation_layers

fix(api): add example to get_export_ids_schema so Swagger "Try it out" pre-fills a valid array (#42265)

2026-07-23 17:15:24 -07:00

async_events

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00

available_domains

…

cachekeys

…

charts

feat(config): add EXTRA_PANDAS_POSTPROCESSING_OPS extension point (#43337)

2026-08-20 13:15:41 -07:00

cli

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

columns

…

commands

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

common

feat(config): add EXTRA_PANDAS_POSTPROCESSING_OPS extension point (#43337)

2026-08-20 13:15:41 -07:00

connectors

feat(multi-value): array-typed column filters with two-tier operators (ClickHouse MVP) (#41279)

2026-08-19 10:56:49 -07:00

core

feat(extensions): add a Storage API for extensions (#39171)

2026-07-21 16:23:56 -03:00

css_templates

fix(api): add example to get_export_ids_schema so Swagger "Try it out" pre-fills a valid array (#42265)

2026-07-23 17:15:24 -07:00

daos

fix(dashboard): derive filter scope on read instead of serving a stale cache (#43252)

2026-08-17 19:23:19 +03:00

dashboards

fix(dashboard): align list OpenAPI schema (#43256)

2026-08-18 10:22:50 -07:00

databases

fix(sqllab): use dialect-specific quote chars for autocomplete identifiers (#41492)

2026-08-13 14:04:38 -07:00

datasets

fix(datasets): preserve metric/column uuids on dataset export (#42393)

2026-08-07 11:15:24 -07:00

datasource

feat(multi-value): array-typed column filters with two-tier operators (ClickHouse MVP) (#41279)

2026-08-19 10:56:49 -07:00

db_engine_specs

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

distributed_lock

…

embedded

feat(i18n): serve language packs as versioned, immutable-cacheable scripts (#41780)

2026-08-02 21:59:44 -07:00

embedded_dashboard

…

examples

fix(charts): fix Bubble chart crash and correct example's time_range to a year with real data (#43201)

2026-08-15 14:16:29 +07:00

explorables

docs: fix parameter name in Explorable.get_query_result docstring (#42646)

2026-08-04 10:15:05 -07:00

explore

feat(datasets): add RLS filter indicator badge to dataset list and explore view (#38807)

2026-07-22 10:07:52 -07:00

extensions

fix(api): improved request handling and embedded dashboard scoping (#42930)

2026-08-17 23:50:25 -07:00

importexport

…

initialization

feat(config): add EXTRA_PANDAS_POSTPROCESSING_OPS extension point (#43337)

2026-08-20 13:15:41 -07:00

key_value

fix: commit migration write in get_shared_value to stop recurring md5 deprecation warning (#42916)

2026-08-12 15:02:34 -07:00

mcp_service

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

middleware

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00

migrations

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

models

fix(charts): align grain-less time comparisons safely (#43315)

2026-08-20 14:55:01 -07:00

openapi

fix(swagger): support URL prefix via APPLICATION_ROOT in OpenAPI and Swagger UI (#40908)

2026-07-13 15:47:09 -07:00

queries

fix(api): add example to get_export_ids_schema so Swagger "Try it out" pre-fills a valid array (#42265)

2026-07-23 17:15:24 -07:00

reports

fix(reports): humanize day-of-month + day-of-week crontabs as OR (#43307)

2026-08-20 16:46:08 -04:00

row_level_security

fix(rls): return a descriptive error for duplicate rule names (#42819)

2026-08-11 12:41:24 -07:00

security

feat(mcp): per-resource token scopes with user-permission intersection (#42297)

2026-08-18 13:11:27 -04:00

semantic_layers

fix(semantic_layers): check access before returning a layer's configuration

2026-08-21 00:38:48 -07:00

sql

fix(sql): handle ORDER BY in embedded MSSQL queries (#43127)

2026-08-14 14:07:10 -04:00

sql_validators

…

sqllab

fix(sqllab): use dialect-specific quote chars for autocomplete identifiers (#41492)

2026-08-13 14:04:38 -07:00

static

…

subjects

feat(subjects): scope principal listings and default new assets to creator groups (#42472)

2026-07-29 14:36:45 +02:00

tables

…

tags

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

tasks

fix(reports): humanize day-of-month + day-of-week crontabs as OR (#43307)

2026-08-20 16:46:08 -04:00

templates

feat(mobile): Add mobile-friendly dashboard consumption mode (#37141)

2026-08-13 13:14:11 -07:00

temporary_cache

…

themes

fix(themes): serve system themes with the algorithm of the slot they fill (#42700)

2026-08-07 14:29:49 +03:00

thumbnails

…

translations

fix(i18n-es): correct case/number collapse in the semantic-layer labels (#43311)

2026-08-20 20:03:57 -07:00

utils

fix(charts): align grain-less time comparisons safely (#43315)

2026-08-20 14:55:01 -07:00

versioning

fix(versioning): pin shadow-row reads and restore to (id, uuid) (#42797)

2026-08-05 11:12:20 -07:00

views

fix(dashboard): align list OpenAPI schema (#43256)

2026-08-18 10:22:50 -07:00

__init__.py

chore(deps): bump pandas from 2.1.4 to 2.3.3 (#42192)

2026-07-18 15:42:02 -07:00

app.py

fix(superset_app_root): when used with oauth (#38033)

2026-07-22 10:34:43 -07:00

config.py

feat(config): add EXTRA_PANDAS_POSTPROCESSING_OPS extension point (#43337)

2026-08-20 13:15:41 -07:00

constants.py

feat(versioning): cross-entity version activity view (#41076)

2026-07-18 11:06:54 -07:00

custom_database_errors.py

…

dataframe.py

…

errors.py

…

exceptions.py

fix(oauth2): log database token failures (#42644)

2026-08-13 12:54:55 -04:00

forms.py

…

jinja_context.py

fix(api): improved request handling and embedded dashboard scoping (#42930)

2026-08-17 23:50:25 -07:00

legacy.py

…

marshmallow_compatibility.py

fix(marshmallow): add compatibility layer for Flask-AppBuilder with marshmallow 4.x (#35920)

2026-07-08 12:09:50 -07:00

result_set.py

…

schemas.py

…

sql_lab.py

fix(sqllab): roll back session before retrying get_query after a broken transaction (#42675)

2026-08-03 15:04:28 -07:00

stats_logger.py

…

superset_typing.py

feat(semantic layers): don't show samples tab in explore (#41509)

2026-08-01 16:03:20 -04:00