brenot-a opened a new issue, #36355: URL: https://github.com/apache/superset/issues/36355
### Bug description 1. Create chart with a user 2. Log with another user which has access to the chart 3. On welcome page, try to set chart as favorite A 403 error occurs. When i look into the code, it's because i'm not the owner https://github.com/apache/superset/blob/5.0/superset/commands/chart/fave.py#L53. But shouldn't someone with access rights, but who is not an owner, be able to add it to their favorites ? ### Screenshots/recordings Try to set favorite with a user which is not the owner: <img width="710" height="353" alt="Image" src="https://github.com/user-attachments/assets/d7c986bb-bfbe-4693-8da2-501345f1f99f"; /> Error : <img width="844" height="182" alt="Image" src="https://github.com/user-attachments/assets/4ef4a0d8-5367-4afb-b0ad-df29faaca6c3"; /> <img width="459" height="107" alt="Image" src="https://github.com/user-attachments/assets/14246a57-81ea-4fd8-918b-d876fcbf81fe"; /> ### Superset version 5.0.0 ### Python version 3.11 ### Node version 18 or greater ### Browser Chrome ### Additional context _No response_ ### Checklist - [x] I have searched Superset docs and Slack and didn't find a solution to my problem. - [x] I have searched the GitHub issue tracker and didn't find a similar bug report. - [x] I have checked Superset's logs for errors and if I found a relevant Python stacktrace, I included it here as text in the "additional context" section. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
