Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

User should not be able to view dashboards created by other users #2792

Closed
pr0m3th3us opened this issue May 22, 2017 · 6 comments
Closed

User should not be able to view dashboards created by other users #2792

pr0m3th3us opened this issue May 22, 2017 · 6 comments
Labels
inactive Inactive for >= 30 days

Comments

@pr0m3th3us
Copy link

Issue

User should be able to view Dashboards created by himself/herself only. User should not be able to view dashboards created by other users.

  • [ x] I have checked the issue tracker for the same issue and I haven't found one similar

Superset version

0.17.4

Expected results

User1 cannot view dashboards(d1, d2, d3) created by User2(d4, d5, d6)

Actual results

User1 can view dashboards created by User2

Steps to reproduce

Create 2 users, both have same roles. Both can view (and edit) each others dashboards. This should not happen in my use case.

@xrmx
Copy link
Contributor

xrmx commented May 22, 2017

What kind of users are these?

@pr0m3th3us
Copy link
Author

pr0m3th3us commented May 22, 2017

I have created non-admin users based on custom roles (as in they have access to specific tables only).
They can be listed here:
http://{superset-host}:{port}/users/list/

Now what I want is that, if user1 creates dasboards d1,d2,d3 and user2 creates d4,d5,d6, then user2 should not be able to access d1,d2,d3 and vice versa.

image

@mistercrunch
Copy link
Member

Alpha users can see all data sources. Gamma users can only see the sources that they have been granted access to.

@gdeepali
Copy link

What about the case where user1 and user2 are both gamma users. Both users' dashboards have slices from the same datasources (possibly created by applying different filters, or by moving some graphs around). Can we still restrict access in some way so that user1 is not able to view user2's created dashboards?

@stale
Copy link

stale bot commented Apr 11, 2019

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. For admin, please label this issue .pinned to prevent stale bot from closing the issue.

@stale stale bot added the inactive Inactive for >= 30 days label Apr 11, 2019
@stale stale bot closed this as completed Apr 18, 2019
@agabardo
Copy link

Same issue here.. I also need help on this one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
inactive Inactive for >= 30 days
Projects
None yet
Development

No branches or pull requests

5 participants