dosubot[bot] commented on issue #35284: URL: https://github.com/apache/superset/issues/35284#issuecomment-3332439868
<!-- Answer --> You are correct: in Superset 6.0.0-RC2, the `GuestUser` class (defined in `superset/security/guest_token.py`) does not have an `active` attribute, which Flask-AppBuilder expects for permission checks. This causes the `AttributeError` you’re seeing when using guest token authentication. The class does implement `is_authenticated` and `is_anonymous` properties, but omits `active` [reference](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/security/guest_token.py). There is no official fix or workaround documented yet, and recent pull requests do not address this issue. Manually adding `active = True` to the `GuestUser` class is a valid workaround and will resolve the compatibility problem with Flask-AppBuilder’s security manager [reference](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/security/guest_token.py). No changes in recent PRs or discussions indicate this has been fixed upstream, so your suggested patch is the best approach for now. <!-- Dosu Comment Footer --> *To reply, just mention [@dosu](https://go.dosu.dev/dosubot).* --- <sup>How did I do? [Good](https://app.dosu.dev/response-feedback/c34f6bd7-a433-4c0f-9a1e-e0177b6093a4?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/c34f6bd7-a433-4c0f-9a1e-e0177b6093a4?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/c34f6bd7-a433-4c0f-9a1e-e0177b6093a4?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/c34f6bd7-a433-4c0f-9a1e-e0177b6093a4?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/c34f6bd7-a433-4c0f-9a1e-e0177b6093a4?feedback_type=hallucination) | [Report 🐛](https://app.dosu.dev/response-feedback/c34f6bd7-a433-4c0f-9a1e-e0177b6093a4?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/c34f6bd7-a433-4c0f-9a1e-e0177b6093a4?feedback_type=other)</sup> [](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=githu b) [](https://go.dosu.dev/discord-bot) [](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/issues/35284) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org For additional commands, e-mail: notifications-h...@superset.apache.org
