Re: [PR] fix(sql lab): scope write and DDL targets in per-table access checks [superset]

[codeant-ai-for-open-source[bot] (via GitHub) via notifications]

codeant-ai-for-open-source[bot] commented on PR #45936:
URL: https://github.com/apache/superset/pull/45936#issuecomment-6565638137

   ## <a href="https://codeant.ai/"; title="CodeAnt AI"><img 
src="https://new-codeant-butcket.s3.us-west-1.amazonaws.com/badges/codeant-block-purple-v2.svg";
 width="28" height="28" align="absmiddle" style="vertical-align:middle" 
alt="CodeAnt" /></a>&nbsp; CodeAnt PR Risk
   
   **🔴&nbsp; High Risk**
   
   - The PR should not merge yet: MCP authorization may render Jinja SQL 
separately from execution, allowing a changing write target to bypass the 
access check.
   
   **Assessed commit:** `49d3c4ae1a1a`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org
For additional commands, e-mail: notifications-h...@superset.apache.org