codeant-ai-for-open-source[bot] commented on PR #38243:
URL: https://github.com/apache/superset/pull/38243#issuecomment-3961812696
## **Sequence Diagram**
Shows how the frontend includes parent_slice_id for child layers of a
multi-layer deck.gl chart and how the backend security manager validates the
child is declared in the parent's configuration before granting access. This
fixes embedded multilayer charts failing due to missing parent association.
```mermaid
sequenceDiagram
participant EmbeddedApp as Client
participant Frontend as DeckMulti (frontend)
participant Backend as Superset Security
participant DB as Slice Store
Client->>Frontend: Request embedded multilayer chart
Frontend->>Frontend: Build subslice form_data (include dashboardId and
parent_slice_id)
Frontend->>Backend: GET explore?form_data=subslice (child layer request)
Backend->>DB: Load parent slice by parent_slice_id
Backend->>Backend: Validate parent is deck_multi and child slice_id in
parent's deck_slices
alt Validation passes
Backend-->>Frontend: 200 OK (child layer data)
Frontend-->>Client: Render multilayer chart
end
```
---
*Generated by [CodeAnt AI](https://codeant.ai)*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
