Daniel Vaz Gaspar
Daniel Vaz Gaspar
it may depend but the LDAP search for a user is done here: https://github.com/dpgaspar/Flask-AppBuilder/blob/master/flask_appbuilder/security/manager.py#L912
Thank you for reporting, currently investigating
> After conversations with @eschutho and @yousoph , we decided that `all_database_access` should remain and provide both access to all data (through all databases connections) and allow listing all said...
To fully invalidate sessions on logout use this: https://superset.apache.org/docs/security/#switching-to-server-side-sessions
POST payload can have sensitive data
please provide your OAUTH configuration
Thank you for posting this issue. sqlparse was bumped to 0.5.0 on https://github.com/apache/superset/pull/28144
the bump was already merged to master here: https://github.com/apache/superset/commit/4f693c6db0dc5c7286a36b8d23e90541943ff13f unfortunately our 4.0.1 had an upper constraint on 22
> @john-bodley Certainly. I've previously dedicated some time to exploring the optimal location for writing unit tests, yet I was unable to identify an appropriate spot within the tests directory....
Please follow our guidelines: https://github.com/apache/superset/security/policy