C-monC opened a new issue, #21434:
URL: https://github.com/apache/superset/issues/21434

   Hi,
   
   Reproduction steps:
   Dashboard A and dashboard B had chart A in.
   Delete chart A from dashboard B.
   Modify chart A and save(overwrite)
   Chart A then reappears in dashboard B.
   
   I can see there is a link to dashboard B in the columns query_context and 
params:
   
`....,"conditional_formatting":[],"extra_form_data":{},"dashboards":[11,42],"force":false,"result_format":"json......`
   Dashboard B has id 11 and Dashboard A has id 42.
   
   The dashboard column does not include the chart A anywhere. Searched for the 
id in its json columns.
   
   A workaround is just recreating the chart and not inserting into dashboard 
B. 
   This is a major security concern because there's no indication it happened. 
I need to manually review dashboards to look for data leakage.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to