jeremiebedjai commented on issue #31938:
URL: https://github.com/apache/superset/issues/31938#issuecomment-2636164008
I ran into the same problem. In my case, the code in the security manager
expects a field named `dashboardId`, which was missing in the `formData`
object.
Instead, the dashboards field is both included in the schema and actually
sent by the frontend, making it more relevant to me. As a result, the check:
```python
and (dashboard_id := form_data.get("dashboardId"))
```
always evaluated to `False`—so the logic for `DASHBOARD_RBAC` never got a
chance to run. Patching the code to handle the actual field name (or list of
IDs) fixed the issue.
Hope this can help.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
