This is an automated email from the ASF dual-hosted git repository.
dpgaspar pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-superset.git
The following commit(s) were added to refs/heads/master by this push:
new e5e9a5f docs: update UPDATING.md with security simplification info
(#12097)
e5e9a5f is described below
commit e5e9a5f05ca6df28c99d1f620aa4a669ee215bc4
Author: Daniel Vaz Gaspar <[email protected]>
AuthorDate: Wed Dec 23 12:24:59 2020 +0000
docs: update UPDATING.md with security simplification info (#12097)
* docs: update UPDATING.md with security simplification info
* update docs better readability
---
UPDATING.md | 12 ++++++++++++
1 file changed, 12 insertions(+)
diff --git a/UPDATING.md b/UPDATING.md
index 9e92d36..81aa7d3 100644
--- a/UPDATING.md
+++ b/UPDATING.md
@@ -23,6 +23,18 @@ This file documents any backwards-incompatible changes in
Superset and
assists people when migrating to a new version.
## Next
+- Security simplification (SIP-19), the following permission domains were
simplified:
+ - [12072](https://github.com/apache/incubator-superset/pull/12072):
`Query` with `can_read`, `can_write`
+ - [12036](https://github.com/apache/incubator-superset/pull/12036):
`Database` with `can_read`, `can_write`.
+ - [12012](https://github.com/apache/incubator-superset/pull/12036):
`Dashboard` with `can_read`, `can_write`.
+ - [12061](https://github.com/apache/incubator-superset/pull/12061): `Log`
with `can_read`, `can_write`.
+ - [12000](https://github.com/apache/incubator-superset/pull/12000):
`Dataset` with `can_read`, `can_write`.
+ - [12014](https://github.com/apache/incubator-superset/pull/12014):
`Annotation` with `can_read`, `can_write`.
+ - [11981](https://github.com/apache/incubator-superset/pull/11981):
`Chart` with `can_read`, `can_write`.
+ - [11853](https://github.com/apache/incubator-superset/pull/11853):
`ReportSchedule` with `can_read`, `can_write`.
+ - [11856](https://github.com/apache/incubator-superset/pull/11856):
`CssTemplate` with `can_read`, `can_write`.
+ - [11764](https://github.com/apache/incubator-superset/pull/11764):
`SavedQuery` with `can_read`, `can_write`.
+ Old permissions will be automatically migrated to these new permissions and
applied to all existing security Roles.
- [11499](https://github.com/apache/incubator-superset/pull/11499): Breaking
change: `STORE_CACHE_KEYS_IN_METADATA_DB` config flag added (default=`False`)
to write `CacheKey` records to the metadata DB. `CacheKey` recording was
enabled by default previously.
- [11920](https://github.com/apache/incubator-superset/pull/11920): Undos the
DB migration from
[11714](https://github.com/apache/incubator-superset/pull/11714) to prevent
adding new columns to the logs table. Deploying a sha between these two PRs may
result in locking your DB.
- [11704](https://github.com/apache/incubator-superset/pull/11704) Breaking
change: Jinja templating for SQL queries has been updated, removing default
modules such as `datetime` and `random` and enforcing static template values.
To restore or extend functionality, use `JINJA_CONTEXT_ADDONS` and
`CUSTOM_TEMPLATE_PROCESSORS` in `superset_config.py`.
