Add has_access to import_dashboard (#4001)

* Add has_access to import_dashboard * Update core.py * Update core.py
apache · Dec 5, 2017 · 4404751 · 4404751
1 parent defe678
commit 4404751
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/superset/views/core.py b/superset/views/core.py
@@ -1090,8 +1090,9 @@ def explore_json(self, datasource_type, datasource_id):
 
         return json_success(viz_obj.json_dumps(payload), status=status)
 
-    @expose('/import_dashboards', methods=['GET', 'POST'])
     @log_this
+    @has_access
+    @expose('/import_dashboards', methods=['GET', 'POST'])
     def import_dashboards(self):
         """Overrides the dashboards using pickled instances from the file."""
         f = request.files.get('file')