Abdulrehman-PIAIC80387 commented on issue #33584:
URL: https://github.com/apache/superset/issues/33584#issuecomment-5128320980

   Thanks for the pointer @rusackas — traced it exactly as you described. 
`get_executor` returns the first CREATOR/MODIFIER/EDITOR without checking 
`user.active`, so an inactive username lands in `login_user()` which silently 
returns `False` and the schedule runs with no auth cookie → 
`ReportScheduleCsvFailedError`.
   
   Fix adds a small `_is_active(user)` predicate at every direct-user return 
site so the priority chain falls through to the next active candidate (or 
raises the existing `ExecutorNotFoundError` if none). Kept 
`login_user(force=True)` off the table — that would let deactivated users 
execute schedules, which is the opposite of what deactivation is for. PR 
incoming.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to