dpgaspar opened a new pull request #13051:
URL: https://github.com/apache/superset/pull/13051


   ### SUMMARY
   A follow up for #12491 that caused problems. The ownership check is inline 
with the current security logic that only owners can change their object 
metadata.
   
   This PR adds a new config flag `OLD_API_CHECK_DATASET_OWNERSHIP` where 
user's can set to `False` to return to previous behaviour. Without checking the 
ownership.
   
   Also added a deprecation warning to the MVC endpoints and `datasource/save`. 
Note that the new API for datasets will check for ownership and ignore 
`OLD_API_CHECK_DATASET_OWNERSHIP`. 
   
   Yet, probably the ownership concept is problematic, and a move for using 
associated roles to objects (dashboards, datasets, charts) is easier to manage. 
   
   ### ADDITIONAL INFORMATION
   - [ ] Has associated issue:
   - [ ] Changes UI
   - [ ] Requires DB Migration.
   - [ ] Confirm DB Migration upgrade and downgrade tested.
   - [ ] Introduces new feature or API
   - [ ] Removes existing feature or API
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to