def validate_chart_dashboard( self, exceptions: List[ValidationError], update: bool = False ) -> None: """Validate chart or dashboard relation""" chart_id = self._properties.get("chart") dashboard_id = self._properties.get("dashboard") creation_method = self._properties.get("creation_method") if creation_method == ReportCreationMethod.CHARTS and not chart_id: # User has not saved chart yet in Explore view exceptions.append(ChartNotSavedValidationError()) return if creation_method == ReportCreationMethod.DASHBOARDS and not dashboard_id: exceptions.append(DashboardNotSavedValidationError()) return if chart_id and dashboard_id: exceptions.append(ReportScheduleOnlyChartOrDashboardError()) if chart_id: chart = ChartDAO.find_by_id(chart_id) if not chart: exceptions.append(ChartNotFoundValidationError()) self._properties["chart"] = chart elif dashboard_id: dashboard = DashboardDAO.find_by_id(dashboard_id) if not dashboard: exceptions.append(DashboardNotFoundValidationError()) self._properties["dashboard"] = dashboard elif not update: exceptions.append(ReportScheduleEitherChartOrDashboardError())
def test_datasource_find_by_id_skip_base_filter_not_found( session_with_data: Session, ) -> None: from superset.charts.dao import ChartDAO result = ChartDAO.find_by_id(125326326, session=session_with_data, skip_base_filter=True) assert result is None
def validate(self) -> None: # Validate/populate model exists self._model = ChartDAO.find_by_id(self._model_id) if not self._model: raise ChartNotFoundError() # Check ownership try: check_ownership(self._model) except SupersetSecurityException: raise ChartForbiddenError()
def test_slice_find_by_id_skip_base_filter(session_with_data: Session) -> None: from superset.charts.dao import ChartDAO from superset.models.slice import Slice result = ChartDAO.find_by_id(1, session=session_with_data, skip_base_filter=True) assert result assert 1 == result.id assert "slice_name" == result.slice_name assert isinstance(result, Slice)
def validate(self) -> None: exceptions: List[ValidationError] = [] dashboard_ids = self._properties.get("dashboards") owner_ids: Optional[List[int]] = self._properties.get("owners") # Validate if datasource_id is provided datasource_type is required datasource_id = self._properties.get("datasource_id") if datasource_id is not None: datasource_type = self._properties.get("datasource_type", "") if not datasource_type: exceptions.append( DatasourceTypeUpdateRequiredValidationError()) # Validate/populate model exists self._model = ChartDAO.find_by_id(self._model_id) if not self._model: raise ChartNotFoundError() # Check and update ownership; when only updating query context we ignore # ownership so the update can be performed by report workers if not is_query_context_update(self._properties): try: check_ownership(self._model) owners = self.populate_owners(self._actor, owner_ids) self._properties["owners"] = owners except SupersetSecurityException as ex: raise ChartForbiddenError() from ex except ValidationError as ex: exceptions.append(ex) # Validate/Populate datasource if datasource_id is not None: try: datasource = get_datasource_by_id(datasource_id, datasource_type) self._properties["datasource_name"] = datasource.name except ValidationError as ex: exceptions.append(ex) # Validate/Populate dashboards only if it's a list if dashboard_ids is not None: dashboards = DashboardDAO.find_by_ids(dashboard_ids) if len(dashboards) != len(dashboard_ids): exceptions.append(DashboardsNotFoundValidationError()) self._properties["dashboards"] = dashboards if exceptions: exception = ChartInvalidError() exception.add_list(exceptions) raise exception
def check_access(dataset_id: int, chart_id: Optional[int], actor: User) -> None: check_dataset_access(dataset_id) if not chart_id: return chart = ChartDAO.find_by_id(chart_id) if chart: can_access_chart = (is_user_admin() or is_owner(chart, actor) or security_manager.can_access( "can_read", "Chart")) if can_access_chart: return raise ChartAccessDeniedError() raise ChartNotFoundError()
def validate(self) -> None: exceptions: List[ValidationError] = list() dashboard_ids = self._properties.get("dashboards") owner_ids: Optional[List[int]] = self._properties.get("owners") # Validate if datasource_id is provided datasource_type is required datasource_id = self._properties.get("datasource_id") if datasource_id is not None: datasource_type = self._properties.get("datasource_type", "") if not datasource_type: exceptions.append( DatasourceTypeUpdateRequiredValidationError()) # Validate/populate model exists self._model = ChartDAO.find_by_id(self._model_id) if not self._model: raise ChartNotFoundError() # Check ownership try: check_ownership(self._model) except SupersetSecurityException: raise ChartForbiddenError() # Validate/Populate datasource if datasource_id is not None: try: datasource = get_datasource_by_id(datasource_id, datasource_type) self._properties["datasource_name"] = datasource.name except ValidationError as ex: exceptions.append(ex) # Validate/Populate dashboards only if it's a list if dashboard_ids is not None: dashboards = DashboardDAO.find_by_ids(dashboard_ids) if len(dashboards) != len(dashboard_ids): exceptions.append(DashboardsNotFoundValidationError()) self._properties["dashboards"] = dashboards # Validate/Populate owner try: owners = populate_owners(self._actor, owner_ids) self._properties["owners"] = owners except ValidationError as ex: exceptions.append(ex) if exceptions: exception = ChartInvalidError() exception.add_list(exceptions) raise exception
def get_viz_annotation_data(annotation_layer: Dict[str, Any], force: bool) -> Dict[str, Any]: chart = ChartDAO.find_by_id(annotation_layer["value"]) form_data = chart.form_data.copy() if not chart: raise QueryObjectValidationError(_("The chart does not exist")) try: viz_obj = get_viz( datasource_type=chart.datasource.type, datasource_id=chart.datasource.id, form_data=form_data, force=force, ) payload = viz_obj.get_payload() return payload["data"] except SupersetException as ex: raise QueryObjectValidationError(error_msg_from_exception(ex))
def validate(self) -> None: # Validate/populate model exists self._model = ChartDAO.find_by_id(self._model_id) if not self._model: raise ChartNotFoundError() # Check there are no associated ReportSchedules reports = ReportScheduleDAO.find_by_chart_id(self._model_id) if reports: report_names = [report.name for report in reports] raise ChartDeleteFailedReportsExistError( _("There are associated alerts or reports: %s" % ",".join(report_names))) # Check ownership try: check_ownership(self._model) except SupersetSecurityException: raise ChartForbiddenError()
def check_access( datasource_id: int, chart_id: Optional[int], datasource_type: DatasourceType, ) -> Optional[bool]: check_datasource_access(datasource_id, datasource_type) if not chart_id: return True chart = ChartDAO.find_by_id(chart_id) if chart: can_access_chart = security_manager.is_owner( chart ) or security_manager.can_access("can_read", "Chart") if can_access_chart: return True raise ChartAccessDeniedError() raise ChartNotFoundError()
def check_access( datasource_id: int, chart_id: Optional[int], datasource_type: DatasourceType, ) -> Optional[bool]: check_datasource_access(datasource_id, datasource_type) if not chart_id: return True # Access checks below, no need to validate them twice as they can be expensive. chart = ChartDAO.find_by_id(chart_id, skip_base_filter=True) if chart: can_access_chart = security_manager.is_owner( chart ) or security_manager.can_access("can_read", "Chart") if can_access_chart: return True raise ChartAccessDeniedError() raise ChartNotFoundError()
def validate_chart_dashboard(self, exceptions: List[ValidationError], update: bool = False) -> None: """ Validate chart or dashboard relation """ chart_id = self._properties.get("chart") dashboard_id = self._properties.get("dashboard") if chart_id and dashboard_id: exceptions.append(ReportScheduleChartOrDashboardValidationError()) if chart_id: chart = ChartDAO.find_by_id(chart_id) if not chart: exceptions.append(ChartNotFoundValidationError()) self._properties["chart"] = chart elif dashboard_id: dashboard = DashboardDAO.find_by_id(dashboard_id) if not dashboard: exceptions.append(DashboardNotFoundValidationError()) self._properties["dashboard"] = dashboard elif not update: exceptions.append(ReportScheduleChartOrDashboardValidationError())