abhishek-ch opened a new issue #14336:
URL: https://github.com/apache/superset/issues/14336


   
   Unable to disable/block user from Exporting to `.csv`, after removing `can 
CSV on Superset` permission from a custom role
    
   
   ### Expected results
   
   Export to .csv shouldn't work after removing the permission from the role. 
   
   ### Actual results
   
   User can export the CSV by clicking the button 
   
![image](https://user-images.githubusercontent.com/7579608/115992339-7da86a00-a5cd-11eb-8999-1c66973640b4.png)
   
   
   #### Screenshots
   Removed all necessary permissions wrt to CSV but user can still export the 
CSV.
   Permission looks below
   
   
![image](https://user-images.githubusercontent.com/7579608/115992349-8dc04980-a5cd-11eb-894c-2cbe5ee3c791.png)
   
   #### How to reproduce the bug
   
   1. Login as Admin user
   2. Click on 'Settings > List Roles'
   3. Copy the role 'Alpha'
   4. Edit the copied alpha role and delete `can CSV on Superset' and save the 
role
   5. Assign the newly created role to a user
   6. Login with user details and go to charts and try to export the .csv
   7. User is still able to export the CSV
   
   ### Environment
   
   latest master
   
   ### Checklist
   
   Make sure to follow these steps before submitting your issue - thank you!
   
   - [x] I have checked the superset logs for python stacktraces and included 
it here as text if there are any.
   - [x] I have reproduced the issue with at least the latest released version 
of superset.
   - [x] I have checked the issue tracker for the same issue and I haven't 
found one similar.
   
   ### Additional context
   
   This was a bug previously but it was fixed!
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to