Pinimo commented on issue #9597:
URL: 
https://github.com/apache/incubator-superset/issues/9597#issuecomment-669908361


   Yet another draft solution:
   
   4. Simpler than (2): create a user/password for the Celery worker on 
`db-init`s, with a very specific caching role. I find it important that this 
role should never be able to actually extract any data (so as not to care too 
much for the password being stolen), just to ping the server and get it to 
cache the data. It would even be possible to modify the `@login_required` 
decorator to add the constraint:
       * "if the user belongs only to group `__cache_worker`, then
           * he should never POST or PUT
           * he should never see any data he requested
           * but his data should be sent out to Redis just like for anybody


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to