cyanoboy opened a new issue #14324: URL: https://github.com/apache/superset/issues/14324
A user with the following roles: - `Gamma` - `Custom` with `schema access on [database_name].[schema]`, `database access on [database_name].(id:2)` is able to see all datasets listed in the dropdown "Choose a dataset" of the "Create a new chart" page, also datasets that belong to database that the user hasn't the permission to see. ### Expected results - see all the datasets from `database_name` in the Datasets page - see all the charts built on datasets that belong to `database_name` - in the "Create a new chart" page user can see in the dropdown list **only** datasets that belong to `database_name` ### Actual results - see all the datasets from `database_name` in the Datasets page - see all the charts built on datasets that belong to `database_name` - in the "Create a new chart" page user can see in the dropdown list datasets that belong to **all databases** connected to Superset #### Screenshots  #### How to reproduce the bug 1. Create a user with gamma and custom roles as in the description of the issue 2. Click on '+ Chart' in the Charts page 3. Click on the dropdown menu 'Choose a dataset' 4. You will see all datasets ### Environment - superset version: `1.0.0`, `1.1` ### Checklist Make sure to follow these steps before submitting your issue - thank you! - [ ] I have checked the superset logs for python stacktraces and included it here as text if there are any. - [x] I have reproduced the issue with at least the latest released version of superset. - [x] I have checked the issue tracker for the same issue and I haven't found one similar. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
