Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How can I only authorize users to dashboards? #4127

Closed
ouyang-lunxi opened this issue Dec 27, 2017 · 14 comments
Closed

How can I only authorize users to dashboards? #4127

ouyang-lunxi opened this issue Dec 27, 2017 · 14 comments
Labels
inactive Inactive for >= 30 days

Comments

@ouyang-lunxi
Copy link

Expected results

I want create a role only the given dashboard can be shown to him, but I can only limit his access on datasource. In another word, I want to create 2 or more different dashboards based on the same datasource, and a specified user can only see one of them. But I can't do that based on the existing security model. Is there any suggestions?

@rahulsingh303
Copy link

Create user and the assign roles . You can start with Gamma , and create additional roles with custom access to data source.

@mcdavey17
Copy link

I don't think data source access is sufficient. ouyang-lunxi says he has two dashboards based on the same data source, and wants to provide (I presume read-only) access to one of those two dashboards. Duplicate of #1799?

@mistercrunch
Copy link
Member

For now security restrictions are on a per-datasource only (also, per schema and per database), allowing users to drill-through and slice/dice the data behind the dashboard.

We do understand the use case where the user may be allowed to see a dashboard, but not to explore the underlying datasources and are planning on supporting this at some point.

@LanDeQuHuXi
Copy link

+1 read-only public dashboard would be nice

1 similar comment
@mojitodaiquiri
Copy link

+1 read-only public dashboard would be nice

@teewhyli
Copy link

@LanDeQuHuXi @mojitodaiquiri i think that functionality is in the works:
#4725

@isunix
Copy link

isunix commented Jan 30, 2019

+1 read-only public dashboard would be nice

@cscainiao
Copy link
Contributor

@isunix Can you elaborate on the implementation steps? Thank you

@stale
Copy link

stale bot commented May 31, 2019

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. For admin, please label this issue .pinned to prevent stale bot from closing the issue.

@stale stale bot added the inactive Inactive for >= 30 days label May 31, 2019
@stale stale bot closed this as completed Jun 7, 2019
@ug911
Copy link

ug911 commented Jun 9, 2019

Is this feature implemented?

@SonaliSihra
Copy link

is this feature is implemented? or anyone is working on it?

@SWoto
Copy link

SWoto commented Sep 30, 2019

Using the reply from @A. kyenze, I had to change some permissions to enable the user to have the following permissions:

  1. Recent Activity
  2. Favorites
  3. Dashboards Lists

So I ended up having the permissions bellow:
[can list on DashboardModelViewAsync, can dashboard on Superset, can fave dashboards on Superset, can recent activity on Superset, can favstar on Superset, can explore on Superset, can fave dashboards by username on Superset, can csrf token on Superset, can explore json on Superset]

Also had to add (of course) the datasource access rights:
[datasource access on [database_3].(id:3), datasource access on [database_3].table_2]

User Roles
Dashboards
Recent Activity
Favorite

So, because i've a generalViewer, and another role to setup the datasource access, it's really easy to add new daashboards to different users.

@michalmisiewicz
Copy link
Contributor

@mistercrunch Is this functionality in roadmap ?

@Lemmynjash
Copy link

Hello team
Is this feature implemented?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
inactive Inactive for >= 30 days
Projects
None yet
Development

No branches or pull requests