dosubot[bot] commented on issue #39967: URL: https://github.com/apache/superset/issues/39967#issuecomment-4461856452
<!-- Answer --> Based on my research, **this issue is only partially addressed** in the Superset codebase: **PR #38387** (merged March 6, 2026) converted the permissions/groups dropdowns to `AsyncSelect` with server-side search, which assumes FAB's `/api/v1/security/permissions-resources/` endpoint supports filtering by `id`, `view_menu.name`, and `permission.name` [[1]](https://github.com/apache/superset/pull/38387). That PR should be included in a 6.1.0 release given the merge date. **However**, as the issue reporter identified, the **root cause lives upstream in Flask-AppBuilder** — the `PermissionViewMenuApi` class doesn't define `search_columns`, meaning those filters return HTTP 400. Superset currently pins FAB to `>=4.7.0, <5.0.0` [[2]](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/pyproject.toml#L48), and I could not find evidence that any FAB 4.x release has added `search_columns` to that API class. So the situation appears to be: - The **frontend** (PR #38387) correctly tries to use server-side search/filtering ✅ - The **backend** (Flask-AppBuilder) still doesn't allow those filters ❌ Unless FAB was patched upstream or Superset added an override to the FAB API class, this bug likely **still exists in 6.1.0**. The reporter's workaround of patching the FAB source to add `search_columns = ["id", "permission.name", "view_menu.name"]` remains the fix. A proper resolution would require either an upstream FAB PR or a Superset-side override of the `PermissionViewMenuApi`. <!-- Dosu Comment Footer --> *To reply, just mention [@dosu](https://go.dosu.dev/dosubot?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=reply-with-mention&utm_term=apache%2Fsuperset).* --- Docs are dead. Just use [Dosu](https://dosu.dev?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-tagline&utm_term=apache%2Fsuperset). [](https://app.dosu.dev/response-feedback?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-feedback&utm_term=apache%2Fsuperset&message_id=ad2355f1-fc18-4390-a5c2-39644a7d4719) [](https://github.dosu.com/apache/superset?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-ask-repo&utm_term=apache%2Fsuperset) [](https://app.dosu.dev/signup?referrer=openSource&source=github-footer&utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-share-team&utm_term=apache%2Fsuperset) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
