You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We are using apache-superset version 3.0.3
When a user that is not logged in tries to reach a dashboard link (e.g: https://<superset_domain>/superset/dashboard/<dashboard_id>/) he get Internal server error (500)
The error message in logs
Traceback (most recent call last):
File "/home/build/.pyzr/venvs/superset-bl5I_M_4-py3.10/lib/python3.10/site-packages/flask/app.py", line 1823, in full_dispatch_request
rv = self.dispatch_request()
File "/home/build/.pyzr/venvs/superset-bl5I_M_4-py3.10/lib/python3.10/site-packages/flask/app.py", line 1799, in dispatch_request
return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)
File "/home/build/.pyzr/venvs/superset-bl5I_M_4-py3.10/lib/python3.10/site-packages/flask_appbuilder/security/decorators.py", line 137, in wraps
return f(self, *args, **kwargs)
File "/home/build/.pyzr/venvs/superset-bl5I_M_4-py3.10/lib/python3.10/site-packages/superset/utils/log.py", line 253, in wrapper
value = f(*args, add_extra_log_payload=log, **kwargs)
File "/home/build/.pyzr/venvs/superset-bl5I_M_4-py3.10/lib/python3.10/site-packages/superset/views/core.py", line 898, in dashboard
"user": bootstrap_user_data(g.user, include_perms=True),
File "/home/build/.pyzr/venvs/superset-bl5I_M_4-py3.10/lib/python3.10/site-packages/superset/views/utils.py", line 97, in bootstrap_user_data
roles, permissions = get_permissions(user)
File "/home/build/.pyzr/venvs/superset-bl5I_M_4-py3.10/lib/python3.10/site-packages/superset/views/utils.py", line 111, in get_permissions
roles_permissions = security_manager.get_user_roles_permissions(user)
File "/home/build/.pyzr/venvs/superset-bl5I_M_4-py3.10/lib/python3.10/site-packages/flask_appbuilder/security/sqla/manager.py", line 420, in get_user_roles_permissions
result[role.name] = []
AttributeError: 'NoneType' object has no attribute 'name'
I think it's important to mention that are using Google/ Dex for authentication so we SupersetSecurityManager override with CustomSsoSecurityManager based on this doc
How to reproduce the bug
Go to a randomly superset's dashboard page
Copy this link
Log out from your account
Go to the copied link
Screenshots/recordings
No response
Superset version
3.1.2
Python version
3.10
Node version
16
Browser
Chrome
Additional context
No response
Checklist
I have searched Superset docs and Slack and didn't find a solution to my problem.
I have searched the GitHub issue tracker and didn't find a similar bug report.
I have checked Superset's logs for errors and if I found a relevant Python stacktrace, I included it here as text in the "additional context" section.
The text was updated successfully, but these errors were encountered:
Are you actually seeing a 500 in your logs? This seems truthful. According to your error, it sounds like on line 420, you should throw a 403 and/or redirect to the login page.
Are you actually seeing a 500 in your logs? This seems truthful. According to your error, it sounds like on line 420, you should throw a 403 and/or redirect to the login page.
@rusackas It's within flask_appbuilder python package. I can't control that.
Bug description
We are using apache-superset version 3.0.3
When a user that is not logged in tries to reach a dashboard link (e.g: https://<superset_domain>/superset/dashboard/<dashboard_id>/) he get Internal server error (500)
The error message in logs
I think it's important to mention that are using Google/ Dex for authentication so we
![Screenshot 2024-04-15 at 9 51 40](https://private-user-images.githubusercontent.com/31502199/322379864-6aac2036-22fe-4823-8f54-e31646eae8eb.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.HULfE20d_JRKiQu6qzgQ7iFBzsJGCMgjJbL78Gz2lus)
SupersetSecurityManager
override withCustomSsoSecurityManager
based on this docHow to reproduce the bug
Screenshots/recordings
No response
Superset version
3.1.2
Python version
3.10
Node version
16
Browser
Chrome
Additional context
No response
Checklist
The text was updated successfully, but these errors were encountered: