Painyjames commented on issue #21207:
URL: https://github.com/apache/superset/issues/21207#issuecomment-1253406068

   Turns out that the subselects are not excluded.
   What happens instead is that tables that have the same name as aliases are 
removed form the list of tables in the SQL query. This causes issues when 
tables have restricted access, since users can circumvent this access check by 
just writing their query in a particular manner.
   This [PR](https://github.com/apache/superset/pull/21535) sorts that issue.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to