alex-cocos opened a new issue, #38195: URL: https://github.com/apache/superset/issues/38195
### Bug description In Superset 5 and 6 version (DEV and NON DEV), we can export SQL Lab data results even when the role is not granted with `can csv` or `can export csv SQLLab` privileges . <img width="556" height="525" alt="Image" src="https://github.com/user-attachments/assets/1f93f751-12bd-4988-b65b-d45c4d20b289"; /> <img width="2538" height="1249" alt="Image" src="https://github.com/user-attachments/assets/53fc219b-390e-420e-b78b-f07a918a7029"; /> ### Screenshots/recordings _No response_ ### Superset version 6.0.0 ### Python version 3.9 ### Node version 16 ### Browser Chrome ### Additional context _No response_ ### Checklist - [x] I have searched Superset docs and Slack and didn't find a solution to my problem. - [x] I have searched the GitHub issue tracker and didn't find a similar bug report. - [x] I have checked Superset's logs for errors and if I found a relevant Python stacktrace, I included it here as text in the "additional context" section. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
