You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "xavier-GitHub76 (via GitHub)" <gi...@apache.org> on 2025/06/11 13:28:25 UTC
[I] can read on Row Level Security / can read on RowLevelSecurity [superset]
xavier-GitHub76 opened a new issue, #33744:
URL: https://github.com/apache/superset/issues/33744
### Bug description
There are 2 permissions:
- can read on Row Level Security
- can read on RowLevelSecurity
I haven't tested whether the 2 are useful, but 'can read on RowLevelSecurity' could be replaced by 'can read on Row Level Security'.
So permissions for Row Level Security could be :
- menu access on Security
- menu access on Row Level Security
- can read on Row Level Security
- can write on Row Level Security
### Screenshots/recordings
_No response_
### Superset version
master / latest-dev
### Python version
3.9
### Node version
16
### Browser
Chrome
### Additional context
_No response_
### Checklist
- [ ] I have searched Superset docs and Slack and didn't find a solution to my problem.
- [ ] I have searched the GitHub issue tracker and didn't find a similar bug report.
- [ ] I have checked Superset's logs for errors and if I found a relevant Python stacktrace, I included it here as text in the "additional context" section.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] can read on Row Level Security / can read on RowLevelSecurity [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas closed issue #33744: can read on Row Level Security / can read on RowLevelSecurity
URL: https://github.com/apache/superset/issues/33744
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] can read on Row Level Security / can read on RowLevelSecurity [superset]
Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
dosubot[bot] commented on issue #33744:
URL: https://github.com/apache/superset/issues/33744#issuecomment-2962791163
<!-- Answer -->
There is a functional difference between the two permissions: 'can read on RowLevelSecurity' is tied to the UI view, while 'can read on Row Level Security' is used for the API. This separation allows for distinct permission policies for UI and API access, so replacing one with the other could unintentionally change access controls. This kind of naming inconsistency has caused issues in other parts of Superset before, especially during upgrades, and usually requires careful migration if you want to unify them [source](https://github.com/apache/superset/issues/31395). If you want to consolidate these permissions, you’ll need to consider both the UI and API use cases and ensure proper migration to avoid breaking access for users [source](https://github.com/apache/superset/blob/a64b9ac84f48074340d14e5cf92505627451ec52/superset/connectors/sqla/views.py).
<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot).*
---
<sup>How did I do? [Good](https://app.dosu.dev/response-feedback/23119e23-65c7-4132-b7b0-e58e717192c9?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/23119e23-65c7-4132-b7b0-e58e717192c9?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/23119e23-65c7-4132-b7b0-e58e717192c9?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/23119e23-65c7-4132-b7b0-e58e717192c9?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/23119e23-65c7-4132-b7b0-e58e717192c9?feedback_type=hallucination) | [Report 🐛](https://app.dosu.dev/response-feedback/23119e23-65c7-4132-b7b0-e58e717192c9?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/23119e23-65c7-4132-b7b0-e58e717192c9?feedback_type=other)</sup> [](https://go.dosu.dev/discord-bot) [!
[Share on X](https://img.shields.io/badge/X-share-black)](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/issues/33744)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] can read on Row Level Security / can read on RowLevelSecurity [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas commented on issue #33744:
URL: https://github.com/apache/superset/issues/33744#issuecomment-2963628971
We suspect both are indeed needed... to consolidate these would be a breaking change and require a migration. We could consider this for the next major release.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org