CSV Upload:

- Add has_access decorator to new custom view so it is secure
apache · Nov 27, 2022 · 236d0c1 · 236d0c1
1 parent 53f9b8c
commit 236d0c1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/superset/views/database/views.py b/superset/views/database/views.py
@@ -123,6 +123,7 @@ class CustomFormView(SimpleFormView):
     """
 
     @expose("/form", methods=["GET"])
+    @has_access
     def this_form_get(self) -> Any:
         self._init_vars()
         form = self.form.refresh()
@@ -136,6 +137,7 @@ def this_form_get(self) -> Any:
         )
 
     @expose("/form", methods=["POST"])
+    @has_access
     def this_form_post(self) -> Any:
         self._init_vars()
         form = self.form.refresh()