Vitor-Avila opened a new issue, #24807:
URL: https://github.com/apache/superset/issues/24807

   It's possible to grant dashboard access to a guest user (`guest_token`), by 
specifying the dashboard `uuid` in the `guest_token` `resources`. The operation 
grants access to all datasets used in charts added to the dashboard, however it 
doesn't grant access to datasets that are only used in dashboard native 
filters. 
   
   #### How to reproduce the bug
   1. Create a chart using any dataset.
   2. Save the chart and add it to a dashboard.
   3. Create a virtual dataset for the same table (a `select *...` would be 
enough).
   4. Create a dashboard filter using the virtual dataset.
   5. Enable embedded access for the dashboard.
   6. Create a `guest_token` and grant access to this dashboard.
   7. Access this dashboard in embedded mode.
   
   ### Expected results
   The dashboard filter should load properly.
   
   ### Actual results
   A permission error is displayed in the filter.
   
   #### Screenshots
   
![image](https://github.com/apache/superset/assets/96086495/abf6af43-af04-4bb1-b7aa-36d5e5f4f2c2)
   
   ### Environment
   - browser type and version: Google Chrome version `114.0.5735.198`
   - superset version: `superset version`
   - python version: `Superset 0.0.0-dev` (running from master)
   - node.js version: `v16.14.2`
   - any feature flags active: `EMBEDDED_SUPERSET`
   
   ### Checklist
   - [x] I have checked the superset logs for python stacktraces and included 
it here as text if there are any.
   - [x] I have reproduced the issue with at least the latest released version 
of superset.
   - [x] I have checked the issue tracker for the same issue and I haven't 
found one similar.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to