rusackas opened a new pull request, #43393: URL: https://github.com/apache/superset/pull/43393
### SUMMARY - The legacy v0 dashboard/dataset importer is no longer reachable from the HTTP import dispatchers (it predates the current permission model and lacks per-object ownership checks); the CLI-only legacy import commands are unaffected. - Saved-query import now requires write access and, on overwrite, ownership (creator or admin), matching the pattern already used by the chart/dashboard/dataset/database importers. - Database import no longer reattaches stored connection credentials when the incoming connection URL or SSH-tunnel endpoint has changed from the stored one. - Dataset import now caps how many bytes it will read from a remote data URI, including after gzip decompression, mirroring the existing cap on ZIP-bundle uploads. - Example-bundle metadata import now uses `yaml.safe_load` instead of the unsafe loader. ### TESTING INSTRUCTIONS `pytest tests/unit_tests/examples/ tests/unit_tests/dashboards/commands/importers/ tests/unit_tests/datasets/commands/importers/ tests/unit_tests/commands/importers/ tests/unit_tests/databases/commands/importers/` — new/extended tests per change, each verified to fail pre-fix and pass post-fix. ### ADDITIONAL INFORMATION - [ ] Has associated issue: - [ ] Required feature flags: - [ ] Changes UI - [ ] Includes DB Migration - [ ] Introduces new feature or API - [ ] Removes existing feature or API -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
