dpgaspar / Flask-AppBuilder

Simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/
BSD 3-Clause "New" or "Revised" License
4.58k stars 1.34k forks source link

idea: add strict_method_mapping option to prevent permission sprawl #2232

Open mistercrunch opened 2 months ago

mistercrunch commented 2 months ago

hey @dpgaspar - here's an idea as to how we may be able to help prevent permission sprawl in Superset, what do you think!?

Another idea would be to add a new class-level attribute allowed_permisions, by default None (not enforced), but if enforce with say allowed_permisions = ["read", "write"], then it would make sure that the mappings provided land on allowed perms.