apache/superset · error · ReportScheduleForbiddenError

Changing this report is forbidden

Error message

Changing this report is forbidden

What it means

Error "Changing this report is forbidden" thrown in apache/superset.

Source

Thrown at superset/commands/report/base.py:134

    def _check_object_access(
        self,
        object_id: int,
        *,
        kind: str,
        dao: type[BaseDAO[Any]],
        not_found_exc: type[ValidationError],
        exceptions: list[ValidationError],
    ) -> None:
        """Validate the object exists and the current user can access it."""
        obj = dao.find_by_id(object_id)
        if not obj:
            exceptions.append(not_found_exc())
        else:
            try:
                security_manager.raise_for_access(**{kind: obj})
            except SupersetSecurityException as ex:
                raise ReportScheduleForbiddenError() from ex
        self._properties[kind] = obj

    def validate_chart_dashboard(
        self, exceptions: list[ValidationError], update: bool = False
    ) -> None:
        """Validate chart or dashboard relation"""
        chart_id = self._properties.get("chart")
        dashboard_id = self._properties.get("dashboard")
        creation_method = self._properties.get("creation_method")

        if creation_method == ReportCreationMethod.CHARTS and not chart_id:
            # User has not saved chart yet in Explore view
            exceptions.append(ChartNotSavedValidationError())
            return

        if creation_method == ReportCreationMethod.DASHBOARDS and not dashboard_id:
            exceptions.append(DashboardNotSavedValidationError())
            return

View on GitHub (pinned to f4587218dd)

Solutions

1. Ask an owner of the report schedule to make the change, or request the can_write permission on Alerts & Reports.

When it happens

Trigger: A non-owner user attempts to modify a report schedule.

Common situations: Creating or updating a report schedule targeting a dashboard or chart the user cannot write to.

Understand the failure class

• Authentication and authorization failures — expired tokens, bad credentials, and missing scopes.

AI-assisted analysis of apache/superset@f4587218dd (2026-08-14). Data as JSON: /api/errors/c1703b781b045d02. Report an issue: GitHub.