EBoisseauSierra opened a new issue #19074:
URL: https://github.com/apache/superset/issues/19074
## **Is your feature request related to a problem? Please describe.**
I want to some of my users to simply be able to consume dashboards — i.e.
log in, access one or many dashboards… and that's it. (One can assume that
dashboard access is then managed via separate RBAC.)
The `Gamma` default is too “powerful” for me (cf. #18870 ), as such users
have access to charts menu, etc.
As for `Public`, it raises lots of errors simply loading the home page, as
users don't have access to the list of dashboards/charts.
## **Describe the solution you'd like**
I would like to create a “dashboard consumer” (`Delta`?) role by default,
that can only log in and have access to the Dashboards menu.
My self-baked role definition consists in the following permissions (which
is a subset of `Gamma`'s ones):
```
[
can read on SavedQuery,
can read on CssTemplate,
can read on ReportSchedule,
can read on Chart,
can read on Annotation,
can read on Dataset,
can read on Dashboard,
can read on Database,
can read on Query,
can show on DynamicPlugin,
can list on DynamicPlugin,
can time range on Api,
can query form data on Api,
can query on Api,
can get on Datasource,
can slice on Superset,
can slice json on Superset,
can fave dashboards by username on Superset,
can fave dashboards on Superset,
can dashboard on Superset,
can profile on Superset,
can fave slices on Superset,
can sqllab table viz on Superset,
can explore json on Superset,
can results on Superset,
can queries on Superset,
can recent activity on Superset,
can favstar on Superset,
can read on SecurityRestApi,
menu access on Dashboards,
can list on FilterSets
]
```
(but I think it could be streamlined even further)
## **Describe alternatives you've considered**
Well, I can keep defining the role myself manually, but IMO there is value
to a default dashboard consumer/read-only role.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
