From 4404751a1d90c7f3a913f4acfb78d3eaf1d8d197 Mon Sep 17 00:00:00 2001
From: timifasubaa <30888507+timifasubaa@users.noreply.github.com>
Date: Tue, 5 Dec 2017 12:03:13 -0800
Subject: [PATCH] Add has_access to import_dashboard (#4001)

* Add has_access to import_dashboard

* Update core.py

* Update core.py
---
 superset/views/core.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/superset/views/core.py b/superset/views/core.py
index e221cb874f74..fc63391faaeb 100755
--- a/superset/views/core.py
+++ b/superset/views/core.py
@@ -1090,8 +1090,9 @@ def explore_json(self, datasource_type, datasource_id):
 
         return json_success(viz_obj.json_dumps(payload), status=status)
 
-    @expose('/import_dashboards', methods=['GET', 'POST'])
     @log_this
+    @has_access
+    @expose('/import_dashboards', methods=['GET', 'POST'])
     def import_dashboards(self):
         """Overrides the dashboards using pickled instances from the file."""
         f = request.files.get('file')