trepmag commented on pull request #14120:
URL: https://github.com/apache/superset/pull/14120#issuecomment-838010479


   I rebased manually into one commit a fix for hiding favorite's favStars and 
filters for char and dashbord lists (the flash message issue was fixed in btw 
into another issue: #14287).
   
   Although, I notice a related left over issue; the `favstar` table can be 
altered by anyone by alternating the following curls:
   ```sh
   $ curl "http://localhost:9000/superset/favstar/Dashboard/1/select/";
   $ curl "http://localhost:9000/superset/favstar/Dashboard/1/unselect/";
   ``` 
   
   The `select` operation insert a row as follow:
   
![image](https://user-images.githubusercontent.com/875021/117778303-c737bc80-b23d-11eb-9d0b-f0c2faa4921a.png)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to