sadpandajoe commented on code in PR #43901: URL: https://github.com/apache/superset/pull/43901#discussion_r4171776658
########## docs/admin_docs/security/security.mdx: ########## @@ -132,6 +132,38 @@ tables in the **Permissions** dropdown. To select the data sources you want to a You can then confirm with users assigned to the **Gamma** role that they see the objects (dashboards and slices) associated with the tables you just extended them. +### Actionable Access-Denied Messages + +When a viewer opens a chart or dashboard built on a dataset they don't have access to, Superset Review Comment: For a dashboard viewer without dataset access, `/api/v1/chart/data` catches the structured denial and returns a bare 403, so neither dataset-owner contacts nor the configured "Request access" link reach the chart. Could we qualify this chart/dashboard guidance to the paths that preserve the access-denial payload? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
