dosubot[bot] commented on issue #33599:
URL: https://github.com/apache/superset/issues/33599#issuecomment-2915160070

   <!-- Answer -->
   In Superset, the ability to add native filters to a dashboard is controlled 
by the "can edit" permission, which is tied to whether the user has dashboard 
edit rights (specifically, `dashboardInfo.dash_edit_perm`). Only users with 
this permission—typically dashboard owners or those with explicit edit 
rights—can add or modify native filters in a dashboard. This is enforced in the 
code that manages dashboard state and native filter configuration, where the UI 
checks for this permission before enabling filter editing features 
([source](https://github.com/apache/superset/blob/master/superset-frontend/src/dashboard/components/DashboardBuilder/state.ts)).
   
   If your READ_USER role is not a dashboard owner and does not have edit 
permissions on the dashboard, they will not be able to add native filters. 
There is no separate, more granular permission specifically for adding native 
filters; it is bundled with the general dashboard edit permission.
   
   To allow READ_USER to add native filters, you would need to grant them 
dashboard edit rights, which also allows them to make other changes to the 
dashboard. If you want to keep READ_USER as a true "read-only" role, there is 
currently no supported way to allow only native filter editing without broader 
edit permissions.
   
   No relevant documentation or prior discussions were found that suggest a 
workaround or a more granular permission for this specific use case.
   
   
   <!-- Dosu Comment Footer -->
   *To reply, just mention my name [@dosu](https://go.dosu.dev/dosubot).*
   
   ---
   <sup>How did I do? 
[Good](https://app.dosu.dev/response-feedback/33533b69-d46b-480c-b8bc-6028adb916a3?feedback_type=great_response)
 | 
[Irrelevant](https://app.dosu.dev/response-feedback/33533b69-d46b-480c-b8bc-6028adb916a3?feedback_type=irrelevant_answer)
 | 
[Incorrect](https://app.dosu.dev/response-feedback/33533b69-d46b-480c-b8bc-6028adb916a3?feedback_type=incorrect_sources)
 | 
[Verbose](https://app.dosu.dev/response-feedback/33533b69-d46b-480c-b8bc-6028adb916a3?feedback_type=too_verbose)
 | 
[Hallucination](https://app.dosu.dev/response-feedback/33533b69-d46b-480c-b8bc-6028adb916a3?feedback_type=hallucination)
 | [Report 
🐛](https://app.dosu.dev/response-feedback/33533b69-d46b-480c-b8bc-6028adb916a3?feedback_type=bug_report)
 | 
[Other](https://app.dosu.dev/response-feedback/33533b69-d46b-480c-b8bc-6028adb916a3?feedback_type=other)</sup>&nbsp;&nbsp;[![Join
 
Discord](https://img.shields.io/badge/join-5865F2?logo=discord&logoColor=white&label=)](https://go.dosu.dev/discord-bot)&nbsp;[!
 [Share on 
X](https://img.shields.io/badge/X-share-black)](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/issues/33599)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to