mirror of
https://github.com/apache/superset.git
synced 2026-04-18 07:35:09 +00:00
64 lines
2.2 KiB
Python
64 lines
2.2 KiB
Python
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
"""Filters for Task model"""
|
|
|
|
from typing import Any
|
|
|
|
from sqlalchemy.orm.query import Query
|
|
|
|
from superset.utils.core import get_user_id
|
|
from superset.views.base import BaseFilter
|
|
|
|
|
|
class TaskFilter(BaseFilter): # pylint: disable=too-few-public-methods
|
|
"""
|
|
Filter for Task that shows tasks based on user subscriptions.
|
|
|
|
Non-admins only see tasks they're subscribed to. Task creators are
|
|
automatically subscribed when creating a task, so this covers both
|
|
owned and shared tasks. Unsubscribing removes visibility.
|
|
|
|
Admins see all tasks without filtering.
|
|
"""
|
|
|
|
def apply(self, query: Query, value: Any) -> Query:
|
|
"""Apply the filter to the query."""
|
|
from sqlalchemy import and_, select
|
|
|
|
from superset import security_manager
|
|
from superset.models.task_subscribers import TaskSubscriber
|
|
from superset.models.tasks import Task
|
|
|
|
# If user is admin or no user_id, return unfiltered query.
|
|
# This typically applies to background tasks and system operations
|
|
user_id = get_user_id()
|
|
if not user_id or security_manager.is_admin():
|
|
return query
|
|
|
|
is_subscribed = (
|
|
select(TaskSubscriber.id)
|
|
.where(
|
|
and_(
|
|
TaskSubscriber.task_id == Task.id,
|
|
TaskSubscriber.user_id == user_id,
|
|
)
|
|
)
|
|
.exists()
|
|
)
|
|
|
|
return query.filter(is_subscribed)
|