superset
superset copied to clipboard
Can't access without logging to dashboard with Sidebar filters
I'm trying to provide my user an anonymous access to my superset using "PUBLIC_LIKE_ROLE".
For this, I setup a Gamme Like role with these permissions :
[can read on SavedQuery, can read on CssTemplate, can read on ReportSchedule, can read on Chart, can read on Annotation, can read on Dataset, can read on Dashboard, can write on Dashboard, can read on Database, can read on Query, can this form get on ResetMyPasswordView, can this form post on ResetMyPasswordView, can this form get on UserInfoEditView, can this form post on UserInfoEditView, can userinfo on UserDBModelView, resetmypassword on UserDBModelView, can get on OpenApi, can show on SwaggerView, can get on MenuApi, can list on AsyncEventsRestApi, can read on AdvancedDataType, can invalidate on CacheRestApi, can export on Chart, can read on DashboardFilterStateRestApi, can write on DashboardFilterStateRestApi, can read on DashboardPermalinkRestApi, can get embedded on Dashboard, can export on Dashboard, can delete embedded on Dashboard, can read on EmbeddedDashboard, can read on ExploreFormDataRestApi, can write on ExploreFormDataRestApi, can read on ExplorePermalinkRestApi, can write on ExplorePermalinkRestApi, can list on FilterSets, can delete on FilterSets, can edit on FilterSets, can add on FilterSets, can export on ImportExportRestApi, can import on ImportExportRestApi, can export on SavedQuery, can show on DynamicPlugin, can list on DynamicPlugin, can delete on RowLevelSecurityFiltersModelView, can show on RowLevelSecurityFiltersModelView, can list on RowLevelSecurityFiltersModelView, can add on RowLevelSecurityFiltersModelView, can edit on RowLevelSecurityFiltersModelView, can download on RowLevelSecurityFiltersModelView, muldelete on RowLevelSecurityFiltersModelView, can time range on Api, can query on Api, can query form data on Api, can this form get on CsvToDatabaseView, can this form post on CsvToDatabaseView, can this form get on ExcelToDatabaseView, can this form post on ExcelToDatabaseView, can this form get on ColumnarToDatabaseView, can this form post on ColumnarToDatabaseView, can external metadata by name on Datasource, can get on Datasource, can external metadata on Datasource, can store on KV, can get value on KV, can my queries on SqlLab, can profile on Superset, can fave dashboards on Superset, can fave dashboards by username on Superset, can sqllab history on Superset, can save dash on Superset, can datasources on Superset, can explore on Superset, can fetch datasource metadata on Superset, can extra table metadata on Superset, can import dashboards on Superset, can dashboard permalink on Superset, can add slices on Superset, can log on Superset, can created dashboards on Superset, can user slices on Superset, can filter on Superset, can copy dash on Superset, can sqllab table viz on Superset, can favstar on Superset, can request access on Superset, can warm up cache on Superset, can queries on Superset, can recent activity on Superset, can search queries on Superset, can validate sql json on Superset, can created slices on Superset, can estimate query cost on Superset, can annotation json on Superset, can testconn on Superset, can schemas access for file upload on Superset, can results on Superset, can slice on Superset, can dashboard on Superset, can stop query on Superset, can sqllab viz on Superset, can available domains on Superset, can tables on Superset, can fave slices on Superset, can slice json on Superset, can explore json on Superset, can expanded on TableSchemaView, can post on TableSchemaView, can get on TabStateView, can post on TabStateView, can activate on TabStateView, can put on TabStateView, can migrate query on TabStateView, can get on TagView, can tagged objects on TagView, can post on TagView, can suggestions on TagView, can read on SecurityRestApi, menu access on List Users, menu access on List Roles, menu access on Action Log, menu access on Access requests, menu access on Home, menu access on Annotation Layers, menu access on Plugins, menu access on Import Dashboards, menu access on Alerts & Report, menu access on Dashboards, menu access on Charts, menu access on SQL Editor, menu access on Saved Queries, menu access on Query Search, menu access on Data, menu access on Databases, menu access on Datasets, can share dashboard on Superset, can share chart on Superset, can read on Explore, can samples on Datasource, datasource access on [PostgreSQL].[memory](id:19)]
User is supposed to be a read only user.
How to reproduce the bug
- Go to any dashboard without Sidebar Filters
- Everything works like a charms
- Go to a dashboard with some filters set in the sidebar
- You got redirected to login page.
- Add &show_filters=0 to your dashboard that redirect you
- You are not redirected anymore but don't have access to filters
Expected results
I would like my user to have read only dashboard and access to sidebar filters without issue.
Environment
- browser type and version: Tried with many Firefox and Chrome version, same issue, nothing in console
- superset version: 2.1.0
- any feature flags active: HORIZONTAL SIDEBAR (same problem without this flag)
Checklist
Make sure to follow these steps before submitting your issue - thank you!
- [x] I have checked the superset logs for python stacktraces and included it here as text if there are any.
- [x] I have reproduced the issue with at least the latest released version of superset.
- [x] I have checked the issue tracker for the same issue and I haven't found one similar.
Still same issue on latest ver
Wondering if @sfirke happens to know the requisite permissions for this. Otherwise tempted to close this as stale, or move it to a Q&A discussion if people are interested in continuing to troubleshoot.