rusackasandClaude Opus 4.8 4c1e7d2ee2 fix(dataset): convert rendered-expression security errors, dedupe guest RLS cache key ...

- validate_rendered_expression now converts every failure mode (parse,
  set operation, disallowed sub-query, sanitization) to
  QueryObjectValidationError, matching validate_stored_expression_at_query_time,
  instead of letting SupersetSecurityException escape uncaught from its
  call sites in connectors/sqla/models.py and models/helpers.py.
- The unresolved-RLS-predicates cache-key fallback now keys guest users
  by a hash of their token's RLS rules/resources instead of
  get_user_id(), which returns None for every guest token and was
  collapsing distinct guest RLS contexts onto the same cache entry.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-08-11 20:21:42 -07:00

..

common

refactor: update Connection.execute() to use queries with text() (#40277)

2026-06-22 15:36:15 -07:00

consts

…

example_data

refactor: replace Engine.execute() with Connection.execute() (#41917)

2026-07-13 09:40:33 -07:00

fixtures

…

integration_tests

test(dataset): update integration tests for RLS cache key and alert auth; strengthen alert query validation

2026-08-11 20:20:27 -07:00

unit_tests

fix(dataset): convert rendered-expression security errors, dedupe guest RLS cache key

2026-08-11 20:21:42 -07:00

__init__.py

…

conftest.py

…