berlicon opened a new issue, #28214: URL: https://github.com/apache/superset/issues/28214
### Bug description User without access to database table can view data from table via dashboard created by another user who has rights to the table. ### How to reproduce the bug 1. I have user1 with access rights to table1 from ClickHouse database 2. I have user2 with NO access rights to table1 from ClickHouse database 3. User1 created dataset, chart and dashboard for viewing data to table1 4. User1 shares dashboard with User2 - added it as dashboard's owner and dataset's owner 5. User2 can view data to table1. It is a bug. He does not have access (database grants) to table1 ### Superset version 3.0.0 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
