xneg opened a new issue #15797:
URL: https://github.com/apache/superset/issues/15797


   **Is your feature request related to a problem? Please describe.**
   According to [documentation](https://superset.apache.org/docs/security) 
   
   > Alpha users have access to all data sources, but they cannot grant or 
revoke access from other users. 
   
   When enabling the DASHBOARD_RBAC setting, Alpha users lost access to 
dashboards they don't own. Only admin users have full access to all dashboards. 
Our BI command has had an Alpha role to create and setup dashboards but they 
are not admins. After enabling DASHBOARD_RBAC they can't see draft dashboards.
   
   **Describe the solution you'd like**
   I suggest to add 
[here](https://github.com/apache/superset/blob/ffa51753e3cfdc401ca976e66e5b85cda032dc08/superset/security/manager.py#L1181)
 another check 
   
   ```
   can_access = (
                   is_user_admin() or is_user_alpha()
                   ...
   ```
   
   **Describe alternatives you've considered**
   An alternative is to add in every newly created dashboard access roles Alpha 
role. But it seems fiddly and easy to miss.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to