You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "rajivpatki (via GitHub)" <gi...@apache.org> on 2023/12/30 12:01:34 UTC
[I] /savedqueryviewapi/api/read throws 401 {"message":"Access is Denied","severity":"danger"} when /api/v1/saved_query works fine [superset]
rajivpatki opened a new issue, #26382:
URL: https://github.com/apache/superset/issues/26382
A clear and concise description of what the bug is.
#### How to reproduce the bug
1. Use admin role user (using auth: Google OAuth) to log in to Superset UI in your browser. Navigate to https://superset.example.com/savedqueryviewapi/api/read
2. Observe the response json: all saved queries from other users show up
3. Use admin credentials (provider: `db`, admin user created during superset init) to make a get request to `/api/v1/saved_query`
4. Own saved queries are returned
5. Use admin credentials (provider: `db`, admin user created during superset init) to make a get request to `/savedqueryviewapi/api/read`
6. Response is status code 401 with content `{"message":"Access is Denied","severity":"danger"}`
### Expected results
Same behaviour as browser UI
### Actual results
401 with Access Denied
### Environment
- browser type and version: Microsoft Edge Version 120.0.2210.91 (Official build) (64-bit)
- superset version: `3.0.2` from official docker image
- any feature flags active:
`ENABLE_PROXY_FIX = True
TALISMAN_ENABLED=True
SECRET_KEY = "SUPERSET_SECRET_KEY"
WTF_CSRF_ENABLED = True
FEATURE_FLAGS = {
"ENABLE_TEMPLATE_PROCESSING": True,
}
SCHEDULED_QUERIES = {<from https://superset.apache.org/docs/installation/alerts-reports/#scheduling-queries-as-reports>}
`
### Checklist
Make sure to follow these steps before submitting your issue - thank you!
- [✓] I have checked the superset logs for python stacktraces and included it here as text if there are any.
- [✓] I have reproduced the issue with at least the latest released version of superset.
- [✓] I have checked the issue tracker for the same issue and I haven't found one similar.
### Additional context
I am trying to implement SCHEDULED_QUERIES as referenced [here](https://superset.apache.org/docs/installation/alerts-reports/#scheduling-queries-as-reports):
> This information can then be retrieved from the endpoint /savedqueryviewapi/api/read and used to schedule the queries that have scheduled_queries in their JSON metadata. For schedulers other than Airflow, additional fields can be easily added to the configuration file above.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] /savedqueryviewapi/api/read throws 401 {"message":"Access is Denied","severity":"danger"} when /api/v1/saved_query works fine [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas closed issue #26382: /savedqueryviewapi/api/read throws 401 {"message":"Access is Denied","severity":"danger"} when /api/v1/saved_query works fine
URL: https://github.com/apache/superset/issues/26382
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] /savedqueryviewapi/api/read throws 401 {"message":"Access is Denied","severity":"danger"} when /api/v1/saved_query works fine [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas commented on issue #26382:
URL: https://github.com/apache/superset/issues/26382#issuecomment-2108078801
@rajivpatki are you still facing this, or have you moved on in some way? Tempted to close as stale, but don't want to do so if you still need help. We'll have a hard time supporting any custom security managers if that's part of the problem here, but if you think it's an underlying Superset bug, we can attempt to get more attention on this.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] /savedqueryviewapi/api/read throws 401 {"message":"Access is Denied","severity":"danger"} when /api/v1/saved_query works fine [superset]
Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
dosubot[bot] commented on issue #26382:
URL: https://github.com/apache/superset/issues/26382#issuecomment-2108081007
<!-- Greeting -->
Hey @rusackas! 🚀 It's great to see you back. Digging into your issue now and I'll get back to you with some insights shortly. 👓
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] /savedqueryviewapi/api/read throws 401 {"message":"Access is Denied","severity":"danger"} when /api/v1/saved_query works fine [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas commented on issue #26382:
URL: https://github.com/apache/superset/issues/26382#issuecomment-2108079406
Meanwhile, let's see what our new bot says....
@dosu-bot
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] /savedqueryviewapi/api/read throws 401 {"message":"Access is Denied","severity":"danger"} when /api/v1/saved_query works fine [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas commented on issue #26382:
URL: https://github.com/apache/superset/issues/26382#issuecomment-2737717949
Closing as stale since we haven't heard back in over a year.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] /savedqueryviewapi/api/read throws 401 {"message":"Access is Denied","severity":"danger"} when /api/v1/saved_query works fine [superset]
Posted by "rajivpatki (via GitHub)" <gi...@apache.org>.
rajivpatki commented on issue #26382:
URL: https://github.com/apache/superset/issues/26382#issuecomment-1878463135
It seems that authentication can either be only OAUTH or DB, not both. Could someone help with how we can authenticate as an admin user or using a Google Service account? I shall happily convert that to proper documentation.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org