DerLinne commented on issue #32836:
URL: https://github.com/apache/superset/issues/32836#issuecomment-3569988024

   We can confirm this problem, too - with a 4.1.2 Version. 
   
   As written, the PUT Request to to Dashboard API causes the problem. With the 
permission `can write on dashboard` added to the public role, the problem is 
gone - but this has security problems. 
   
   Interesting behaviour in our case: The problem comes up within our public 
dashboards - by switching between them. But: When the login screen is shown, 
you can use the Browser Back Button to open the source Dashboard again. If you 
then click the link to the other dashboards, the navigation is done without 
login (and without the PUT Request).
   
   Sounds for me like a dirty state is detected before the first navigation 
attempt. The second one, after the Back Button Usage, seems to be clean. Is 
there such a functionality in superset?
   
   In general this looks like an important problem, because a anonymous use of 
dashboards is currently not possible with versions > 4.0.2.
   
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to