GitHub user dosubot[bot] added a comment to the discussion: Anonymous access to 
dashboard

<!-- Answer -->
In Superset 5.0.0, to make a dashboard accessible without login, you need to 
set PUBLIC_ROLE_LIKE = "Public" (or "Gamma") in your superset_config.py in 
addition to AUTH_ROLE_PUBLIC and DASHBOARD_RBAC. Without PUBLIC_ROLE_LIKE, the 
Public role is empty and anonymous access will always be denied—even if you 
manually assign permissions, as these are overwritten on init or restart. 

So, add this to your config:
```python
PUBLIC_ROLE_LIKE = "Public"
```
or, if you want Gamma-like (read-only) permissions:
```python
PUBLIC_ROLE_LIKE = "Gamma"
```
Then run `superset init` and restart the service. Make sure the dashboard is 
published, the Public role is assigned to it, and the Public role has 
datasource access to all datasets used by the dashboard. 

If you still see "Access is Denied", double-check that the Public role has 
explicit access to every dataset used in the dashboard—dataset permissions are 
still required even with DASHBOARD_RBAC enabled. There was also a recent bug 
where the backend expected a `dashboardId` field but the frontend sent 
`dashboards`; if you’re on the latest 5.0.0 release, this should be fixed, but 
if not, you may need to patch or update Superset for proper RBAC logic to apply 
[[source]](https://github.com/apache/superset/pull/36548) 
[[source]](https://github.com/apache/superset/discussions/36009) 
[[source]](https://github.com/apache/superset/issues/31938).

After making these changes, anonymous users should be able to access the 
dashboard as intended.


<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot).*

---
<sup>How did I do? 
[Good](https://app.dosu.dev/response-feedback/bd555532-a5da-4364-b0d9-40a400b813bc?feedback_type=great_response)
 | 
[Irrelevant](https://app.dosu.dev/response-feedback/bd555532-a5da-4364-b0d9-40a400b813bc?feedback_type=irrelevant_answer)
 | 
[Incorrect](https://app.dosu.dev/response-feedback/bd555532-a5da-4364-b0d9-40a400b813bc?feedback_type=incorrect_sources)
 | 
[Verbose](https://app.dosu.dev/response-feedback/bd555532-a5da-4364-b0d9-40a400b813bc?feedback_type=too_verbose)
 | 
[Hallucination](https://app.dosu.dev/response-feedback/bd555532-a5da-4364-b0d9-40a400b813bc?feedback_type=hallucination)
 | [Report 
🐛](https://app.dosu.dev/response-feedback/bd555532-a5da-4364-b0d9-40a400b813bc?feedback_type=bug_report)
 | 
[Other](https://app.dosu.dev/response-feedback/bd555532-a5da-4364-b0d9-40a400b813bc?feedback_type=other)</sup>

[![Chat with 
Dosu](https://dosu.dev/dosu-chat-badge.svg)](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=github)&nbsp;[![Open
 in 
Cursor](https://dosu.dev/dosu-in-cursor.svg)](https://cursor.com/link/prompt?text=In%20Superset%205.0.0%2C%20to%20make%20a%20dashboard%20accessible%20without%20login%2C%20you%20need%20to%20set%20PUBLIC_ROLE_LIKE%20%3D%20%22Public%22%20%28or%20%22Gamma%22%29%20in%20your%20superset_config.py%20in%20addition%20to%20AUTH_ROLE_PUBLIC%20and%20DASHBOARD_RBAC.%20Without%20PUBLIC_ROLE_LIKE%2C%20the%20Public%20role%20is%20empty%20and%20anonymous%20access%20will%20always%20be%20denied%E2%80%94even%20if%20you%20manually%20assign%20permissions%2C%20as%20these%20are%20overwritten%20on%20init%20or%20restart.%20%0A%0ASo%2C%20add%20this%20to%20your%20config%3A%0A%60%60%60python%0APUBLIC_ROLE_LIKE%20%3D%20%22Public%22%0A%60%60%60%0Aor%2C%20if%20you%20want%20Gamma-like%20%28read-only%29%20permissions%3A%0A%60%60%60python%0APUBLIC_ROLE_LIKE%20%3D%20%2
 
2Gamma%22%0A%60%60%60%0AThen%20run%20%60superset%20init%60%20and%20restart%20the%20service.%20Make%20sure%20the%20dashboard%20is%20published%2C%20the%20Public%20role%20is%20assigned%20to%20it%2C%20and%20the%20Public%20role%20has%20datasource%20access%20to%20all%20datasets%20used%20by%20the%20dashboard.%20%0A%0AIf%20you%20still%20see%20%22Access%20is%20Denied%22%2C%20double-check%20that%20the%20Public%20role%20has%20explicit%20access%20to%20every%20dataset%20used%20in%20the%20dashboard%E2%80%94dataset%20permissions%20are%20still%20required%20even%20with%20DASHBOARD_RBAC%20enabled.%20There%20was%20also%20a%20recent%20bug%20where%20the%20backend%20expected%20a%20%60dashboardId%60%20field%20but%20the%20frontend%20sent%20%60dashboards%60%3B%20if%20you%E2%80%99re%20on%20the%20latest%205.0.0%20release%2C%20this%20should%20be%20fixed%2C%20but%20if%20not%2C%20you%20may%20need%20to%20patch%20or%20update%20Superset%20for%20proper%20RBAC%20logic%20to%20apply%20%5B%5Bsource%5D%5D%28https%3A//git
 
hub.com/apache/superset/pull/36548%29%20%5B%5Bsource%5D%5D%28https%3A//github.com/apache/superset/discussions/36009%29%20%5B%5Bsource%5D%5D%28https%3A//github.com/apache/superset/issues/31938%29.%0A%0AAfter%20making%20these%20changes%2C%20anonymous%20users%20should%20be%20able%20to%20access%20the%20dashboard%20as%20intended.)&nbsp;[![Join
 
Discord](https://img.shields.io/badge/join-5865F2?logo=discord&logoColor=white&label=)](https://go.dosu.dev/discord-bot)&nbsp;[![Share
 on 
X](https://img.shields.io/badge/X-share-black)](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/discussions/37573)

GitHub link: 
https://github.com/apache/superset/discussions/37573#discussioncomment-15650550

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: 
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to