Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Don't let users see dashboards only because it's favorited #24991

Conversation

jfrag1
Copy link
Member

@jfrag1 jfrag1 commented Aug 15, 2023

SUMMARY

I initially was looking into this due to this issue: #19849, however I found the issue was mostly fixed on master. Access to charts and datasets of the dashboard is revoked when the role is revoked. However, favorited dashboards that the user shouldn't have access to otherwise still show up on the dashboard listview, which I think is undesired since trying to click on that dashboard then results in an error.

This PR makes it so that favorite status is not taken into consideration by the list dashboards endpoint.

Fixes #19849

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

TESTING INSTRUCTIONS

ADDITIONAL INFORMATION

  • Has associated issue: Fixes Dashboard RBAC Favourite issue #19849
  • Required feature flags:
  • Changes UI
  • Includes DB Migration (follow approval process in SIP-59)
    • Migration is atomic, supports rollback & is backwards-compatible
    • Confirm DB migration upgrade and downgrade tested
    • Runtime estimates and downtime expectations provided
  • Introduces new feature or API
  • Removes existing feature or API

@michael-s-molina
Copy link
Member

@jfrag1 Is this the last piece to fix #19849? If so, could you add "Fixes #19849" to your PR description so that when this PR is merged the issue is also closed?

@jfrag1
Copy link
Member Author

jfrag1 commented Aug 15, 2023

@jfrag1 Is this the last piece to fix #19849? If so, could you add "Fixes #19849" to your PR description so that when this PR is merged the issue is also closed?

Yes it should be. I didn't know about that integration, added

@michael-s-molina
Copy link
Member

I don't know why it does not work in the Has associated issue section but I added to the default description and I can confirm the issue will be closed once this PR is merged.

Screenshot 2023-08-15 at 17 00 30

Copy link
Member

@michael-s-molina michael-s-molina left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thanks for the fix @jfrag1!

@michael-s-molina michael-s-molina added the v3.0 Label added by the release manager to track PRs to be included in the 3.0 branch label Aug 16, 2023
@lilykuang lilykuang merged commit 258e562 into apache:master Aug 18, 2023
31 checks passed
@lilykuang lilykuang deleted the jack/dont-show-dashboard-in-list-view-only-because-favorited branch August 18, 2023 00:35
@michael-s-molina michael-s-molina added v3.0 Label added by the release manager to track PRs to be included in the 3.0 branch and removed v3.0 Label added by the release manager to track PRs to be included in the 3.0 branch labels Aug 18, 2023
michael-s-molina pushed a commit that referenced this pull request Aug 18, 2023
@mistercrunch mistercrunch added 🍒 3.0.0 🍒 3.0.1 🍒 3.0.2 🍒 3.0.3 🍒 3.0.4 🏷️ bot A label used by `supersetbot` to keep track of which PR where auto-tagged with release labels 🚢 3.1.0 labels Mar 8, 2024
vinothkumar66 pushed a commit to vinothkumar66/superset that referenced this pull request Nov 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🏷️ bot A label used by `supersetbot` to keep track of which PR where auto-tagged with release labels size/M v3.0 Label added by the release manager to track PRs to be included in the 3.0 branch 🍒 3.0.0 🍒 3.0.1 🍒 3.0.2 🍒 3.0.3 🍒 3.0.4 🚢 3.1.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Dashboard RBAC Favourite issue
4 participants