fixed guest role permissions (apache#21208)

preset-io · Aug 28, 2022 · d408393 · d408393
1 parent c61a507
commit d408393
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/superset/security/manager.py b/superset/security/manager.py
@@ -1826,6 +1826,9 @@ def get_permissions(
         if user.is_anonymous:
             public_role = current_app.config.get("AUTH_ROLE_PUBLIC")
             query = query.filter(Role.name == public_role)
+        elif self.is_guest_user(user):
+            guest_role = current_app.config.get("GUEST_ROLE_NAME")
+            query = query.filter(Role.name == guest_role)
         else:
             query = query.filter(assoc_user_role.c.user_id == user.id)