fix: catalog permission check

apache · Jul 12, 2024 · 09d8fc8 · 09d8fc8
1 parent 84a1cd2
commit 09d8fc8
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/superset/security/manager.py b/superset/security/manager.py
@@ -860,7 +860,7 @@ def get_catalogs_accessible_by_user(
             if len(parts) == 2 and default_catalog:
                 accessible_catalogs.add(default_catalog)
             elif len(parts) == 3:
-                accessible_catalogs.add(parts[2])
+                accessible_catalogs.add(parts[1])
 
         # datasource_access
         if perms := self.user_view_menu_names("datasource_access"):
@@ -911,7 +911,12 @@ def get_datasources_accessible_by_user(  # pylint: disable=invalid-name
                 return datasource_names
 
         if schema:
-            schema_perm = self.get_schema_perm(database, catalog, schema)
+            default_catalog = database.get_default_catalog()
+            schema_perm = self.get_schema_perm(
+                database.database_name,
+                catalog or default_catalog,
+                schema,
+            )
             if schema_perm and self.can_access("schema_access", schema_perm):
                 return datasource_names