rusackas opened a new pull request, #43390: URL: https://github.com/apache/superset/pull/43390
### SUMMARY - Tag-relationship deletion now checks per-object access on each object being untagged, instead of only checking the objects being added. - Bulk tag deletion by name now requires admin or creator, and refuses to delete system-generated tags outright. - The user-registrations API is now admin-only and read-only, matching how the legacy view for the same resource is already restricted. - The report-execution-log API now scopes results to schedules the caller can access, via a base filter, matching the pattern the sibling schedule-CRUD API already uses. - Dataset drill-info responses no longer include creator/modifier email addresses in the nested user object. ### TESTING INSTRUCTIONS `pytest tests/unit_tests/tags/ tests/unit_tests/security/ tests/unit_tests/reports/ tests/unit_tests/datasets/` — new/extended tests per change, each verified to fail pre-fix and pass post-fix. ### ADDITIONAL INFORMATION - [ ] Has associated issue: - [ ] Required feature flags: - [ ] Changes UI - [ ] Includes DB Migration - [ ] Introduces new feature or API - [ ] Removes existing feature or API -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
