From d408393ba9bb6c81c661248521be93dd70c9e19b Mon Sep 17 00:00:00 2001 From: Shubham Sinha Date: Sun, 28 Aug 2022 12:38:41 +0530 Subject: [PATCH] fixed guest role permissions (#21208) --- superset/security/manager.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/superset/security/manager.py b/superset/security/manager.py index 369c73fade..3a92feba4f 100644 --- a/superset/security/manager.py +++ b/superset/security/manager.py @@ -1826,6 +1826,9 @@ class SupersetSecurityManager( # pylint: disable=too-many-public-methods if user.is_anonymous: public_role = current_app.config.get("AUTH_ROLE_PUBLIC") query = query.filter(Role.name == public_role) + elif self.is_guest_user(user): + guest_role = current_app.config.get("GUEST_ROLE_NAME") + query = query.filter(Role.name == guest_role) else: query = query.filter(assoc_user_role.c.user_id == user.id)