Superset DevandClaude Sonnet 5 176257e42a fix(semantic_layers): check access before returning a layer's configuration ...

Add SemanticLayer.raise_for_access(), mirroring the existing
SemanticView.raise_for_access(), and call it from the layer GET, runtime
schema, and views endpoints before returning or exercising a layer's
decrypted configuration. Previously these endpoints resolved the layer by
UUID with no per-object permission check.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-21 00:38:48 -07:00

..

advanced_data_type

…

annotation_layers

…

async_events

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00

charts

feat(config): add EXTRA_PANDAS_POSTPROCESSING_OPS extension point (#43337)

2026-08-20 13:15:41 -07:00

cli

fix(cli): avoid DetachedInstanceError in compute-thumbnails (#41530)

2026-07-09 19:26:41 -07:00

columns

…

commands

fix(api): improved request handling and embedded dashboard scoping (#42930)

2026-08-17 23:50:25 -07:00

common

fix(charts): align grain-less time comparisons safely (#43315)

2026-08-20 14:55:01 -07:00

connectors

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

dao

fix(dashboard): preserve refresh_frequency when absent from save data (#42354)

2026-07-27 23:13:11 -07:00

daos

fix(api): improved request handling and embedded dashboard scoping (#42930)

2026-08-17 23:50:25 -07:00

dashboards

fix(dashboard): derive filter scope on read instead of serving a stale cache (#43252)

2026-08-17 19:23:19 +03:00

databases

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

datasets

fix(api): improved request handling and embedded dashboard scoping (#42930)

2026-08-17 23:50:25 -07:00

datasource

feat: semantic layer extension (#37815)

2026-05-05 12:07:46 -04:00

db_engine_specs

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

distributed_lock

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

examples

feat(versioning): entity-version base infrastructure (gated off, dark launch) (#41176)

2026-07-09 19:57:05 -07:00

explore

test(security): prove Drill By access does not require can_explore (#27900) (#41967)

2026-07-13 12:05:16 -07:00

extensions

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

fixtures

feat(dashboard): expand all chart descriptions (#32958)

2026-08-06 14:47:30 -07:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502)

2026-05-11 10:24:42 -07:00

initialization

chore(security): warn when legacy encryption engine is configured (#42937)

2026-08-11 09:35:46 -07:00

key_value

fix: commit migration write in get_shared_value to stop recurring md5 deprecation warning (#42916)

2026-08-12 15:02:34 -07:00

mcp_service

fix(mcp): preserve user-authored result values (#43202)

2026-08-20 18:29:39 -04:00

middleware

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00

migrations

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

models

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

openapi

fix(dashboard): align list OpenAPI schema (#43256)

2026-08-18 10:22:50 -07:00

pandas_postprocessing

fix: drop post-processing options the operation no longer accepts (#42927)

2026-08-19 18:15:15 -07:00

queries

feat(config): add EXTRA_PANDAS_POSTPROCESSING_OPS extension point (#43337)

2026-08-20 13:15:41 -07:00

reports

fix(reports): preserve Slack v1 private-channel text delivery (#42089)

2026-08-12 14:42:57 -07:00

row_level_security

feat: introduce Subject model and entity editors/viewers (#38831)

2026-07-08 11:00:03 -07:00

scripts

feat(subjects): scope principal listings and default new assets to creator groups (#42472)

2026-07-29 14:36:45 +02:00

security

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

semantic_layers

fix(semantic_layers): check access before returning a layer's configuration

2026-08-21 00:38:48 -07:00

server

chore(deps-dev): bump gevent from 24.2.1 to 26.4.0 (#40378)

2026-06-03 12:58:17 -07:00

sql

fix(sql): handle ORDER BY in embedded MSSQL queries (#43127)

2026-08-14 14:07:10 -04:00

sql_validators

feat(sqllab): syntax validation for sqlite-based DB engine specs (#38698)

2026-04-20 18:29:51 -04:00

sqllab

fix(sqllab): use dialect-specific quote chars for autocomplete identifiers (#41492)

2026-08-13 14:04:38 -07:00

subjects

fix(mcp): harden the embedded-guest chart data-read path

2026-08-14 14:55:11 -03:00

tables

…

tags

feat: introduce Subject model and entity editors/viewers (#38831)

2026-07-08 11:00:03 -07:00

tasks

fix(reports): humanize day-of-month + day-of-week crontabs as OR (#43307)

2026-08-20 16:46:08 -04:00

themes

fix(themes): serve system themes with the algorithm of the slot they fill (#42700)

2026-08-07 14:29:49 +03:00

thumbnails

fix(thumbnails): stabilize digest by sorting datasources and charts (#38079)

2026-02-20 09:51:35 +01:00

translations

feat(i18n): serve language packs as versioned, immutable-cacheable scripts (#41780)

2026-08-02 21:59:44 -07:00

utils

fix(charts): align grain-less time comparisons safely (#43315)

2026-08-20 14:55:01 -07:00

versioning

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

views

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

__init__.py

…

config_swagger_ui_test.py

fix(config): make Swagger UI opt-in (off by default) (#41300)

2026-06-25 10:34:28 -07:00

config_test.py

feat(versioning): version-history retention cleanup job (#41075)

2026-07-27 19:59:11 -07:00

conftest.py

chore: Unset future flag in engines and sessions. (#43273)

2026-08-20 10:58:37 -07:00

core_tests.py

fix(explore): render Jinja before validating legacy chart filters (#41996)

2026-07-23 22:05:14 -07:00

dataframe_test.py

fix(api): nan is not properly handled for athena connections (#37071)

2026-01-22 18:29:09 +03:00

docker_compose_image_tag_test.py

fix(docker): isolate tagged images from host packages (#42249)

2026-07-28 11:51:48 -07:00

extension_tests.py

fix: replace deprecated appbuilder.app with current_app (#40876)

2026-06-09 15:01:43 -07:00

feature_flag_test.py

…

initialization_test.py

fix(reports): enforce dashboard readiness and execution budget (#42624)

2026-08-05 14:30:35 -07:00

jinja_context_test.py

fix(api): improved request handling and embedded dashboard scoping (#42930)

2026-08-17 23:50:25 -07:00

legacy_tests.py

…

result_set_test.py

test(result_set): add regression test for empty result set column metadata (#35962)

2026-07-27 23:08:59 -07:00

scheduled_docker_image_refresh_test.py

fix(ci): use current actions for Docker refresh (#42482)

2026-08-11 12:04:09 -07:00

sql_lab_execution_context.py

fix(sql-lab): improved SQL statement parsing and validation (#42928)

2026-08-11 19:35:43 -07:00

sql_lab_test.py

feat: bump SQLAlchemy to 2.0 and flask-sqlalchemy to 3.1.1 (#42803)

2026-08-12 19:55:14 -07:00

test_check_secret_key.py

fix(config): refuse to start with an empty SECRET_KEY (#41299)

2026-06-26 12:07:17 -07:00

test_init_extensions_logging.py

fix(extensions): log extension-init failures via the logger, not print() (#41304)

2026-06-23 11:25:33 -07:00

test_marshmallow4_compat.py

chore(deps): bump marshmallow from 3.26.2 to 4.3.0 (#39751)

2026-06-19 10:02:35 -07:00

test_marshmallow_compatibility.py

fix(marshmallow): add compatibility layer for Flask-AppBuilder with marshmallow 4.x (#35920)

2026-07-08 12:09:50 -07:00

test_mcp_stdio_entrypoint.py

fix(mcp): redirect stdio click echo without recursion (#40814)

2026-06-15 10:10:40 -07:00

test_sqllab_error_stacktrace.py

fix(sqllab): surface stacktrace in SQL Lab error responses (#28248) (#40585)

2026-06-02 10:41:39 -07:00

test_subdirectory_url_for.py

chore(viz): remove legacy explore_json + viz.py pipeline (#41714)

2026-08-06 13:22:15 -07:00