GitHub user dosubot[bot] added a comment to the discussion: Login redirection does not use subpath prefix
<!-- Answer --> That confirms the issue — Flask-AppBuilder's `PermissionViewMenuApi` doesn't declare `search_columns` for `permission.name` or `view_menu.name`, so filtering on those fields is rejected [[1]](https://github.com/apache/superset/issues/39967). PR #39465 didn't fix this; it only addressed different problems (HTTP 414/429) by switching the *initial load* to a role-scoped endpoint, but the search dropdown still hits `/api/v1/security/permissions-resources/` with a name filter. **Fix:** You need to override the `PermissionViewMenuApi` class in your deployment. Add this to a custom security manager file or your `superset_config.py`: ```python from flask_appbuilder.models.sqla.filters import FilterContains from flask_appbuilder.security.sqla.apis import PermissionViewMenuApi class SupersetPermissionViewMenuApi(PermissionViewMenuApi): search_columns = ["id", "permission.name", "view_menu.name"] def _init_properties(self) -> None: super()._init_properties() for col in ["permission.name", "view_menu.name"]: self._filters._search_filters[col] = [ FilterContains(col, self.datamodel) ] ``` Then wire it up via your custom security manager: ```python from superset.security import SupersetSecurityManager class CustomSecurityManager(SupersetSecurityManager): permission_view_menu_api = SupersetPermissionViewMenuApi ``` And in `superset_config.py`: ```python CUSTOM_SECURITY_MANAGER = CustomSecurityManager ``` This adds the missing `search_columns` and manually registers the dot-notation filters that FAB's `Filters.__init__` fails to auto-detect [[1]](https://github.com/apache/superset/issues/39967). After applying this, restart Superset and the permission search should work. <!-- Dosu Comment Footer --> *To reply, just mention [@dosu](https://go.dosu.dev/dosubot?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=reply-with-mention&utm_term=apache%2Fsuperset).* --- Share context across your team and agents. Try [Dosu](https://dosu.dev?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-tagline&utm_term=apache%2Fsuperset). [](https://app.dosu.dev/response-feedback?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-feedback&utm_term=apache%2Fsuperset&message_id=948e8b39-c2d0-46ea-ab31-fbc27a5919e6) [](https://github.dosu.com/apache/superset?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-learn-repo&utm_term=apache%2Fsuperset) [](https://app.dosu.dev/signup?referrer=openSource&source=github-footer&utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-add-team&utm_term=apache%2Fsuperset) GitHub link: https://github.com/apache/superset/discussions/40082#discussioncomment-17241747 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
