From 9856800cee8b5b08d1a4aa85e8b45698805bd4e4 Mon Sep 17 00:00:00 2001
From: Beto Dealmeida <roberto@dealmeida.net>
Date: Tue, 9 Apr 2019 20:51:42 -0700
Subject: [PATCH] Do not add tag to non-saved objects (#7266)

---
 superset/views/tags.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/superset/views/tags.py b/superset/views/tags.py
index 3be876912..cffec8748 100644
--- a/superset/views/tags.py
+++ b/superset/views/tags.py
@@ -77,6 +77,9 @@ class TagView(BaseSupersetView):
     @expose('/tags/<object_type:object_type>/<int:object_id>/', methods=['GET'])
     def get(self, object_type, object_id):
         """List all tags a given object has."""
+        if object_id == 0:
+            return json_success(json.dumps([]))
+
         query = db.session.query(TaggedObject).filter(and_(
             TaggedObject.object_type == object_type,
             TaggedObject.object_id == object_id))
@@ -87,6 +90,9 @@ class TagView(BaseSupersetView):
     @expose('/tags/<object_type:object_type>/<int:object_id>/', methods=['POST'])
     def post(self, object_type, object_id):
         """Add new tags to an object."""
+        if object_id == 0:
+            return Response(status=404)
+
         tagged_objects = []
         for name in request.get_json(force=True):
             if ':' in name: