john-bodley commented on issue #13954: URL: https://github.com/apache/superset/issues/13954#issuecomment-820855840
@amitmiran137 @bkyryliuk @eschutho @nytai @willbarrett we discussed the security concerns I raised above during today's Superset Meetup ([notes](https://docs.google.com/document/d/1xRLqmUn-G7WiPe8qZnfuvbrYHZ1jmk9aSv9Bhjis2tg/edit#heading=h.qih0vp5y9jf4)). I realize the proposed solution limits functionality and adds some complexity if you wanted to send a group email, i.e., you would need to create a user (with the appropriate permissions) with said email address, but it does close a fairly large security concern. Does anyone have concerns with the proposed approach and/or ideas for an alternative formulation? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
