[security] Fix, let admin's be able to reset user passwords on AUTH_DB (#9232)

* [security] Fix, let admin's be able to reset user passwords on AUTH_DB

* [security] Fix, use constants
This commit is contained in:
Daniel Vaz Gaspar 2020-03-03 18:57:23 +00:00 committed by GitHub
parent 4e1fa95035
commit d55240a598
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 1 deletions

View File

@ -81,7 +81,11 @@ PermissionViewModelView.list_widget = SupersetSecurityListWidget
PermissionModelView.list_widget = SupersetSecurityListWidget
# Limiting routes on FAB model views
UserModelView.include_route_methods = RouteMethod.CRUD_SET | {"userinfo"}
UserModelView.include_route_methods = RouteMethod.CRUD_SET | {
RouteMethod.ACTION,
RouteMethod.ACTION_POST,
"userinfo",
}
RoleModelView.include_route_methods = RouteMethod.CRUD_SET
PermissionViewModelView.include_route_methods = {RouteMethod.LIST}
PermissionModelView.include_route_methods = {RouteMethod.LIST}