partially protect the old MVC also

apache · Jan 13, 2021 · e949170 · e949170
1 parent 0ae16bf
commit e949170
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/superset/connectors/sqla/views.py b/superset/connectors/sqla/views.py
@@ -37,6 +37,7 @@
 from superset.typing import FlaskResponse
 from superset.utils import core as utils
 from superset.views.base import (
+    check_ownership,
     create_table_permissions,
     DatasourceFilter,
     DeleteMixin,
@@ -459,6 +460,9 @@ class TableModelView(  # pylint: disable=too-many-ancestors
     def pre_add(self, item: "TableModelView") -> None:
         validate_sqlatable(item)
 
+    def pre_update(self, item: "TableModelView") -> None:
+        check_ownership(item)
+
     def post_add(  # pylint: disable=arguments-differ
         self,
         item: "TableModelView",