Manage authorization in events (#2805)

FredLL-Avaiga · Fred Lefévère-Laoide · web-flow · commit e65e96fab8b7 · 2026-02-11T17:11:13.000+01:00
* Manage authorization in events Hide authorization exceptions Closes Enterprise #707 #708 #709 * show warning when debugging + Fab's comment * try another version of networkx * revert * upgrade pandas to 2.2 * remove mongomock duplicate * mongomock 4.2.13 does not exist * mongomock 4.2.13 does not exist * adding moto[s3] * fixing pipfile for mongomock and moto * manage pandas version * pandas versions * no array is pipfile * try something that should work * remove unused * initialize context * more tests --------- Co-authored-by: Fred Lefévère-Laoide <Fred.Lefevere-Laoide@Taipy.io>
diff --git a/Pipfile b/Pipfile
@@ -23,7 +23,7 @@ marshmallow = "==3.20.1"
 networkx = "==2.6"
 numpy = "<2.0.0"
 openpyxl = "==3.1.2"
-pandas = "==1.3.5"
+pandas = "==2.2"
 pyarrow = "==16.0.0"
 pymongo = {extras = ["srv"], version = "==4.6.3"}
 python-dotenv = "==1.0.0"
diff --git a/taipy/gui/gui.py b/taipy/gui/gui.py
@@ -3063,9 +3063,18 @@ def _get_authorization(self, client_id: t.Optional[str] = None, system: t.Option
         try:
             return _Hooks()._get_authorization(self, client_id, system) or contextlib.nullcontext()
         except Exception as e:
-            _warn("Hooks:", e)
+            _warn("Hooks._get_authorization()", e)
             return contextlib.nullcontext()
 
+    def _is_exception_ignored(self, exception: Exception, source: t.Optional[str] = None) -> bool:
+        if is_debugging():
+            return False
+        try:
+            return _Hooks()._is_exception_ignored(self, exception, source) or False
+        except Exception as e:
+            _warn("Hooks._is_exception_ignored()", e)
+            return False
+
     def set_favicon(self, favicon_path: t.Union[str, Path], state: t.Optional[State] = None):
         """Change the favicon for all clients.
 
@@ -3122,7 +3131,8 @@ def __do_fire_event(
             with self.get_app_context(), self.__event_manager:
                 if client_id:
                     setattr(get_server_request_accessor(self).get_request_meta(), Gui.__ARG_CLIENT_ID, client_id)
-                _Hooks()._fire_event(event_name, client_id, payload)
+                with self._get_authorization():
+                    _Hooks()._fire_event(event_name, client_id, payload)
         finally:
             if this_sid:
                 get_server_request_accessor(self).set_sid(this_sid)
diff --git a/taipy/gui/test/mock_state.py b/taipy/gui/test/mock_state.py
@@ -66,3 +66,11 @@ def broadcast(self, name: str, value: t.Any):
 
     def _invoke_on_gui(self, method: t.Callable, *args):
         return method(self.get_gui(), *args)
+
+    def patch(
+        self,
+        name: str,
+        change: t.Optional[t.Dict[t.Union[str, int], t.Any]] = None,
+        remove: t.Optional[t.Dict[t.Union[str, int], t.Any]] = None,
+    ):
+        return
diff --git a/taipy/gui/utils/_evaluator.py b/taipy/gui/utils/_evaluator.py
@@ -237,7 +237,8 @@ def __evaluate_holder(self, gui: Gui, holder: t.Type[_TaipyBase], expr: str) ->
                 holder_value.set(expr_value)
             return holder_value
         except Exception as e:
-            _warn(f"Cannot evaluate expression {holder.__name__}({expr_hash},'{expr_hash}') for {expr}", e)
+            if not gui._is_exception_ignored(e, "Evaluator"):
+                _warn(f"Cannot evaluate expression {holder.__name__}({expr_hash},'{expr_hash}') for {expr}", e)
         return None
 
     def evaluate_expr(
@@ -277,12 +278,13 @@ def evaluate_expr(
             with gui._get_authorization():  # type: ignore[attr-defined]
                 expr_evaluated = eval(not_encoded_expr if is_edge_case else expr_string, ctx)
         except Exception as e:
-            exception_str = not_encoded_expr if is_edge_case else expr_string
-            _warn(
-                f"Cannot evaluate expression '{_Evaluator._clean_exception_expr(exception_str)}'",
-                e,
-                always_show=True,
-            )
+            if not gui._is_exception_ignored(e, "Evaluator"):
+                exception_str = not_encoded_expr if is_edge_case else expr_string
+                _warn(
+                    f"Cannot evaluate expression '{_Evaluator._clean_exception_expr(exception_str)}'",
+                    e,
+                    always_show=True,
+                )
             expr_evaluated = None
         if lambda_expr and callable(expr_evaluated):
             expr_hash = _get_lambda_id(expr_evaluated, module=module_name)  # type: ignore[arg-type]
@@ -313,7 +315,8 @@ def refresh_expr(self, gui: Gui, var_name: str, holder: t.Optional[_TaipyBase]):
             if holder is not None:
                 holder.set(expr_evaluated)
         except Exception as e:
-            _warn(f"Exception raised evaluating {_Evaluator._clean_exception_expr(expr_string)}", e)
+            if not gui._is_exception_ignored(e, "Evaluator"):
+                _warn(f"Exception raised evaluating {_Evaluator._clean_exception_expr(expr_string)}", e)
 
     def re_evaluate_expr(self, gui: Gui, var_name: str) -> t.Set[str]:  # noqa C901
         """
diff --git a/taipy/gui_core/_context.py b/taipy/gui_core/_context.py
@@ -100,12 +100,12 @@ def __init__(self, gui: Gui) -> None:
         self.submissions_lock = Lock()
         # lazy_start
         self.__started = False
-        # Gui event listener
-        gui._add_event_listener("authorization", self._auth_listener, with_state=True) # type: ignore
         # super
         super().__init__(reg_id, reg_queue)
 
     def on_user_init(self, state: State):
+        # Gui event listener
+        self.gui._add_event_listener("authorization", self._auth_listener, with_state=True) # type: ignore
         self.gui._fire_event("authorization", get_state_id(state), {}) # type: ignore
 
     def __lazy_start(self):
diff --git a/tests/gui_core/test_context_crud_scenario.py b/tests/gui_core/test_context_crud_scenario.py
@@ -41,6 +41,26 @@ def mock_is_true(entity_id):
 
 
 class TestGuiCoreContext_crud_scenario:
+    def test_crud_scenario_none(self):
+        gui_core_context = _GuiCoreContext(Mock())
+        state = MockState(Mock())
+
+        mock_core_delete = Mock()
+
+        with (
+            patch("taipy.gui_core._context.core_get", side_effect=mock_core_get),
+            patch("taipy.gui_core._context.is_deletable", side_effect=mock_is_true),
+            patch("taipy.gui_core._context.core_delete", side_effect=mock_core_delete),
+        ):
+            assert (
+                gui_core_context.crud_scenario(
+                    state,
+                    "id",
+                    t.cast(dict, {}),
+                )
+                is None
+            )
+
     def test_crud_scenario_delete(self):
         gui_core_context = _GuiCoreContext(Mock())
         state = MockState(Mock())
@@ -58,3 +78,59 @@ def test_crud_scenario_delete(self):
                 t.cast(dict, {"args": [None, None, None, True, True, {"id": "a_scenario_id"}], "error_id": "error_id"}),
             )
             mock_core_delete.assert_called_once()
+
+    def test_crud_scenario_create_no_scenario(self):
+        gui_core_context = _GuiCoreContext(Mock())
+        state = MockState(Mock())
+        state.assign = Mock()
+
+        mock_core_delete = Mock()
+
+        with (
+            patch("taipy.gui_core._context.core_get", side_effect=mock_core_get),
+            patch("taipy.gui_core._context.is_deletable", side_effect=mock_is_true),
+            patch("taipy.gui_core._context.core_delete", side_effect=mock_core_delete),
+        ):
+            gui_core_context.crud_scenario(
+                state,
+                "id",
+                t.cast(
+                    dict, {"args": [None, None, None, False, True, {"id": "a_scenario_id"}], "error_id": "error_id"}
+                ),
+            )
+            state.assign.assert_called_once_with("error_id", "Invalid configuration id (None)")
+
+    def test_crud_scenario_create_scenario_no_dialog(self):
+        gui_core_context = _GuiCoreContext(Mock())
+        state = MockState(Mock())
+        state.assign = Mock()
+
+        mock_core_delete = Mock()
+
+        with (
+            patch("taipy.gui_core._context.core_get", side_effect=mock_core_get),
+            patch("taipy.gui_core._context.is_deletable", side_effect=mock_is_true),
+            patch("taipy.gui_core._context.core_delete", side_effect=mock_core_delete),
+        ):
+            gui_core_context.crud_scenario(
+                state,
+                "id",
+                t.cast(
+                    dict,
+                    {
+                        "args": [
+                            None,
+                            None,
+                            {"config": "a_scenario_config_id"},
+                            False,
+                            True,
+                            {"id": "a_scenario_id"},
+                            False,
+                        ],
+                        "error_id": "error_id",
+                    },
+                ),
+            )
+            state.assign.assert_called_once_with(
+                "error_id", "Error creating Scenario: only one scenario config needed (0) found."
+            )
diff --git a/tests/gui_core/test_context_get_datanodes_tree.py b/tests/gui_core/test_context_get_datanodes_tree.py
@@ -0,0 +1,56 @@
+# Copyright 2021-2025 Avaiga Private Limited
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+#        http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
+# an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations under the License.
+
+import typing as t
+from unittest.mock import Mock, patch
+
+from taipy import Scope
+from taipy.core import DataNode, Scenario
+from taipy.core.data.pickle import PickleDataNode
+from taipy.gui_core._context import _GuiCoreContext
+
+scenario_a = Scenario("scenario_a_config_id", None, {"a_prop": "a"})
+scenario_b = Scenario("scenario_b_config_id", None, {"a_prop": "b"})
+scenarios: t.List[t.Union[t.List, Scenario, None]] = [scenario_a, scenario_b]
+
+
+datanode_a = PickleDataNode("datanode_a_config_id", Scope.SCENARIO)
+datanode_b = PickleDataNode("datanode_b_config_id", Scope.SCENARIO)
+datanodes: t.List[t.Union[t.List, DataNode, None]] = [datanode_a, datanode_b]
+
+
+def mock_core_get(entity_id):
+    if entity_id == datanode_a.id:
+        return datanode_a
+    if entity_id == datanode_b.id:
+        return datanode_b
+    return None
+
+
+def mock_is_true(entity_id):
+    return True
+
+
+class TestGuiCoreContext_get_datanodes_tree:
+    def test_crud_scenario_none(self):
+        gui_core_context = _GuiCoreContext(Mock())
+
+        mock_core_delete = Mock()
+
+        with (
+            patch("taipy.gui_core._context.core_get", side_effect=mock_core_get),
+            patch("taipy.gui_core._context.is_deletable", side_effect=mock_is_true),
+            patch("taipy.gui_core._context.core_delete", side_effect=mock_core_delete),
+        ):
+            res = gui_core_context.get_datanodes_tree(None, None, None, None)
+            assert isinstance(res, list)
+            assert len(res) == 0
+
diff --git a/tests/gui_core/test_context_on_init.py b/tests/gui_core/test_context_on_init.py
@@ -0,0 +1,30 @@
+# Copyright 2021-2025 Avaiga Private Limited
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+#        http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
+# an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations under the License.
+
+import typing as t
+from unittest.mock import Mock
+
+from taipy.core import Cycle, Scenario
+from taipy.gui_core._context import _GuiCoreContext
+
+scenario_a = Scenario("scenario_a_config_id", None, {"a_prop": "a"})
+scenario_b = Scenario("scenario_b_config_id", None, {"a_prop": "b"})
+scenarios: t.List[t.Union[Cycle, Scenario]] = [scenario_a, scenario_b]
+
+
+class TestGuiCoreContext_on_init:
+    def test_on_init(self):
+        gui_core_context = _GuiCoreContext(Mock())
+        mock_state = Mock()
+        gui_core_context._auth_listener = Mock(gui_core_context._auth_listener)
+        gui_core_context.on_user_init(mock_state)
+        gui_core_context._auth_listener.assert_not_called()
+
diff --git a/tests/gui_core/test_context_scenarios.py b/tests/gui_core/test_context_scenarios.py
@@ -0,0 +1,52 @@
+# Copyright 2021-2025 Avaiga Private Limited
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+#        http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
+# an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations under the License.
+
+import typing as t
+from unittest.mock import Mock
+
+from taipy.core import Cycle, Scenario
+from taipy.gui_core._context import _GuiCoreContext
+
+scenario_a = Scenario("scenario_a_config_id", None, {"a_prop": "a"})
+scenario_b = Scenario("scenario_b_config_id", None, {"a_prop": "b"})
+scenarios: t.List[t.Union[Cycle, Scenario]] = [scenario_a, scenario_b]
+
+
+class TestGuiCoreContext_scenarios:
+    def test_get_scenarios_no_scenarios(self):
+        gui_core_context = _GuiCoreContext(Mock())
+        gui_core_context.scenario_by_cycle = {}
+        new_scenarios = gui_core_context.get_scenarios(None, None, None)
+        assert isinstance(new_scenarios, list)
+        assert len(new_scenarios) == 0
+
+    def test_get_scenarios_no_filter(self):
+        gui_core_context = _GuiCoreContext(Mock())
+        gui_core_context.scenario_by_cycle = {}
+        new_scenarios = gui_core_context.get_scenarios(scenarios, None, None)
+        assert len(new_scenarios) == len(scenarios)
+        for new_scenario, scenario in zip(new_scenarios, scenarios):
+            assert new_scenario is scenario
+
+    def test_select_scenario(self):
+        gui_core_context = _GuiCoreContext(Mock())
+        mock_state = Mock()
+        mock_state.assign = Mock()
+        gui_core_context.select_scenario(mock_state, "", {})
+        mock_state.assign.assert_not_called()
+        gui_core_context.select_scenario(mock_state, "scenario_a_config_id", {"args": ["var", "value"]}) # pyright: ignore[reportArgumentType]
+        mock_state.assign.assert_called_once_with("var", "value")
+
+    def test_get_scenario_configs(self):
+        gui_core_context = _GuiCoreContext(Mock())
+        res = gui_core_context.get_scenario_configs()
+        assert res is not None
+        assert len(res) == 0
diff --git a/tools/packages/taipy-core/setup.requirements.txt b/tools/packages/taipy-core/setup.requirements.txt
@@ -1,7 +1,8 @@
 boto3>=1.29.4,<=1.38.27
 networkx>=2.6,<=3.5
 openpyxl>=3.1.2,<=3.1.5
-pandas>=1.3.5,<=2.2.3
+pandas>=2.2,<3; python_version >= '3.10'
+pandas>=1.3.5,<=2.2.3; python_version < '3.10'
 pyarrow>=16.0.0,<=20.0.0
 pymongo[srv]>=4.2.0,<=4.13.0
 sqlalchemy>=2.0.16,<=2.0.41
diff --git a/tools/packages/taipy-gui/setup.requirements.txt b/tools/packages/taipy-gui/setup.requirements.txt
@@ -7,7 +7,8 @@ gevent-websocket>=0.10.1,<=0.10.1
 gitignore-parser>=0.1,<=0.1.12
 kthread>=0.2.3,<=0.2.3
 markdown>=3.6,<=3.8
-pandas>=1.3.5,<=2.2.3
+pandas>=2.2,<3; python_version >= '3.10'
+pandas>=1.3.5,<=2.2.3; python_version < '3.10'
 python-dotenv>=1.0.0,<=1.1.0
 pytz>=2021.3,<=2025.2
 simple-websocket>=0.10.1,<=1.1.0
