Amin Ghadersohi 8247e67d58 fix(mcp): hide write tools from users without write permissions (#40098) ...

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
(cherry picked from commit e25d708197)

2026-06-05 16:42:55 -07:00

..

advanced_data_type

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

annotation_layers

chore: set up ruff as a new linter/formatter (#28158)

2024-04-24 17:19:53 -07:00

async_events

chore(GAQ): Remove GLOBAL_ASYNC_QUERIES_REDIS_CONFIG (#30284)

2025-01-21 20:03:00 -08:00

charts

fix(dashboard-filter): Consider dashboard filters to charts not declared in the dashboard position (#40774)

2026-06-04 14:27:52 -07:00

columns

chore: remove sl_ tables (#28704)

2024-05-29 19:04:37 -07:00

commands

fix(dashboard): use datasetUuid instead of datasetId in display controls export/import (SC-104655) (#40008)

2026-06-05 11:33:17 -07:00

common

fix(time-comparison): shift offset filter when X-axis is adhoc Custom SQL (#40586)

2026-06-03 15:47:38 -07:00

connectors

fix(dashboard): catch DatasourceNotFound in get_datasets to prevent 404 (#37503)

2026-01-30 12:17:18 -08:00

dao

feat: Add BaseDAO improvements and test reorganization (#35018)

2026-01-26 12:40:43 -08:00

daos

fix(reports): escape SQL LIKE wildcards in find_by_extra_metadata (#38738)

2026-04-13 10:16:49 -07:00

dashboards

fix(dashboard-import): remap chartsInScope on import (#26338) (#40140)

2026-06-05 11:54:42 -07:00

databases

fix: OAuth2 exception should be 403 (#40074)

2026-05-19 15:12:17 -07:00

datasets

fix(dataset): validate catalog against allow_multi_catalog on import (#40376)

2026-06-03 15:47:38 -07:00

datasource

feat(api): dataset read API uuid support (#34836)

2026-01-26 12:40:41 -08:00

db_engine_specs

fix(GSheets OAuth2): Re-add UnauthenticatedError (#39785)

2026-05-19 15:12:17 -07:00

distributed_lock

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

explore

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

extensions

feat(docker): Add pytest support to docker-compose-light.yml (#34373)

2025-08-06 00:17:50 -04:00

fixtures

fix(dev/ci): pre-commit fixes galore (#32352)

2025-02-24 11:26:45 -07:00

importexport

fix(importexport): honor overwrite flag on /api/v1/assets/import (#39502)

2026-05-18 14:05:41 -07:00

key_value

feat: add option for hash algorithms (#35621)

2026-01-26 12:40:50 -08:00

mcp_service

fix(mcp): hide write tools from users without write permissions (#40098)

2026-06-05 16:42:55 -07:00

migrations

chore: proper current_app.config proxy usage (#34345)

2025-07-31 19:27:42 -07:00

models

fix(sqla): pass catalog and schema to get_sqla_engine in values_for_column (#38681)

2026-05-22 15:14:47 -07:00

pandas_postprocessing

fix(mixed-timeseries): preserve all-NaN metric columns after pivot when Jinja evaluates to NULL (#40005)

2026-05-21 14:58:23 -07:00

queries

fix: Enforce per-user caching on legacy API endpoint (#39789)

2026-04-30 14:09:24 -07:00

reports

fix(filterReports): _generate_native_filter() crashes on null/empty filterValues (#38954)

2026-04-13 10:16:49 -07:00

scripts

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

security

feat: role/user CRUD events and login/logout tracking in the action log (#39121)

2026-04-10 15:25:19 -07:00

sql

fix(mcp): Block destructive DDL (DROP, TRUNCATE, ALTER) in execute_sql (#39621)

2026-06-03 09:13:54 -07:00

tables

chore: remove sl_ tables (#28704)

2024-05-29 19:04:37 -07:00

tags

fix(tags): ensure tag creation is compatible with MySQL by avoiding Markup objects (#36075)

2025-11-18 10:49:04 -08:00

tasks

fix(OAuth2): Support OAuth2 exception with legacy endpoint (#39897)

2026-05-19 15:12:17 -07:00

themes

feat(theming): add per-theme custom font URL support (#36317)

2026-01-26 12:40:50 -08:00

thumbnails

perf(security): cache RLS filters per-request to avoid repeated DB queries (#38110)

2026-02-28 23:33:53 -08:00

utils

fix(reports): add per-tile animation wait to prevent partial ECharts renders in tiled screenshots (#40694)

2026-06-05 09:16:03 -07:00

views

feat(auth): add SAML login support to frontend (#38606)

2026-03-13 11:06:32 +00:00

__init__.py

…

config_test.py

chore: proper current_app.config proxy usage (#34345)

2025-07-31 19:27:42 -07:00

conftest.py

fix: Bump FAB to 5.X (#33055)

2025-09-12 17:07:53 -07:00

core_tests.py

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

dataframe_test.py

fix(api): nan is not properly handled for athena connections (#37071)

2026-01-22 11:07:10 -08:00

extension_tests.py

fix(reports): keep body sized so standalone screenshots don't time out (#39944)

2026-05-08 14:28:16 -07:00

feature_flag_test.py

chore: s/MockFixture/MockerFixture/g (#29160)

2024-06-10 12:35:07 -04:00

initialization_test.py

chore: Support specifying app_root via superset_config.py (#38284)

2026-03-04 21:27:27 -08:00

jinja_context_test.py

fix: handle undefined template variables safely in query rendering. (#35009)

2026-01-07 10:54:23 -08:00

legacy_tests.py

chore: set up ruff as a new linter/formatter (#28158)

2024-04-24 17:19:53 -07:00

result_set_test.py

fix(SQL Lab): handle columns without names (#38986)

2026-04-13 10:16:49 -07:00

sql_lab_execution_context.py

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

sql_lab_test.py

fix(rls): prevent double-apply when converting physical dataset to virtual (#39725)

2026-05-20 11:51:41 -07:00

test_viz_cache_key.py

fix: Enforce per-user caching on legacy API endpoint (#39789)

2026-04-30 14:09:24 -07:00

test_viz_get_df_payload.py

fix(OAuth2): Support OAuth2 exception with legacy endpoint (#39897)

2026-05-19 15:12:17 -07:00