etadelta222 opened a new issue #15026:
URL: https://github.com/apache/superset/issues/15026


   Our organization has external users who have access to dashboards 
specifically designed for them. We are running an older version of superset and 
upgrading to the 1.1.0. In the new version the UI has filter and search 
capabilities on the dashboard page (referenced 
[here](https://docs.preset.io/docs/how-to-find-charts-and-dashboards)). 
   
   Even though user accessing the dashboard only has access to their dashboard, 
the dropdown list for 'Owners' and 'Created By' display ALL users. This is an 
issue since we don't want external users to be able to see other users.
   
   
![image](https://user-images.githubusercontent.com/19858818/121082751-8e432700-c7ac-11eb-9120-51cb903c9be9.png)
   
   
   Since we are restricting the user access to specific dashboards using roles 
and permissions, a new permission to limit the values in the drop downs would 
be ideal. 
   
   Current options:
   The values are being populated by calling the 
/dashboard/related/[column_name] API. We would have to pass in query parameter 
to only show current user OR based on user/role only show 'All' as default 
value OR hide 'Owners' and 'Created By'. 
   
   
https://github.com/apache/superset/blob/74473e2ad1975150a6dc578d67aae05de5ba4b02/superset-frontend/src/views/CRUD/dashboard/DashboardList.tsx#L386
   
   I've asked about this in the Apache Superset Slack workspace and have not 
had any luck. Please let me know if I can provide any additional information.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to