Integrate role, permission, user APIs on Flask-AppBuilder into Apache…

… Superset (apache#21050)

superset/config.py

@@ -975,6 +975,7 @@ def CSV_TO_HIVE_UPLOAD_DIRECTORY_FUNC(  # pylint: disable=invalid-name
 FAB_ADD_SECURITY_PERMISSION_VIEW = False
 FAB_ADD_SECURITY_VIEW_MENU_VIEW = False
 FAB_ADD_SECURITY_PERMISSION_VIEWS_VIEW = False
+FAB_ADD_SECURITY_API = False
 
 # The link to a page containing common errors and their resolutions
 # It will be appended at the bottom of sql_lab errors.

superset/initialization/__init__.py

@@ -28,6 +28,13 @@
 from flask_compress import Compress
 from werkzeug.middleware.proxy_fix import ProxyFix
 
+from flask_appbuilder.security.sqla.apis import (
+    PermissionApi,
+    PermissionViewMenuApi,
+    RoleApi,
+    UserApi,
+    ViewMenuApi,
+)
 from superset.constants import CHANGE_ME_SECRET_KEY
 from superset.extensions import (
     _event_logger,
@@ -382,6 +389,14 @@ def init_views(self) -> None:
             ),
         )
         appbuilder.add_api(SecurityRestApi)
+
+        if self.config["FAB_ADD_SECURITY_API"]:
+            appbuilder.add_api(PermissionApi)
+            appbuilder.add_api(PermissionViewMenuApi)
+            appbuilder.add_api(RoleApi)
+            appbuilder.add_api(UserApi)
+            appbuilder.add_api(ViewMenuApi)
+
         #
         # Conditionally setup email views
         #