GitHub user htcnokia created a discussion: # [Feature Request] Automatic dataset permission inheritance for Dashboard Viewers in Superset 6.1.0
### Description Currently, in Apache Superset 6.1.0, when an administrator grants access to a Dashboard to a specific user, user group, or role (e.g., adding them as a **Viewer**), those users often still cannot view the charts on the dashboard. They encounter permission errors because they lack access to the underlying **Datasets** used by those charts. To fix this, admins must manually navigate to Security settings, identify all datasets powering every chart on that dashboard, and configure complex permissions/roles individually. This manual multi-step process is tedious, error-prone, and creates a high operational burden for dashboard management. ### Desired Behavior / Proposed Solution Superset should automatically and seamlessly handle underlying dataset access when dashboard viewer permissions are updated: 1. **Automated Permission Cascading:** * When a User, User Group, or Role is assigned as a **Viewer** on a Dashboard, the system should automatically grant implicit read access (or assign the necessary dataset permissions) to all datasets referenced by the charts on that dashboard. * If a new chart (with a new dataset) is added to the dashboard later, existing dashboard viewers should automatically inherit read access to the new dataset. 2. **Smart Cleanup on Revocation:** * If a viewer role/user is removed from a Dashboard, the system should automatically evaluate and clean up redundant dataset permissions (unless the user still needs access via another shared dashboard or explicit role assignment). 3. **Admin Transparency & Control (Optional Toggle):** * Provide an admin workspace setting: `AUTO_GRANT_DASHBOARD_DATASET_ACCESS = True` (enabled by default or per-dashboard setting). * Display a brief confirmation/toast when saving dashboard permissions: *"Viewer access updated. Dataset permissions have been automatically configured."* ### Benefits * **Eliminate Admin Friction:** Reduces a tedious, multi-step configuration process to a single action. * **Fewer "Access Denied" Support Tickets:** Ensures that users granted access to a dashboard can actually view all charts out-of-the-box. * **Improved UX & Scalability:** Aligns Superset with modern BI platform standards (like Tableau or Power BI) where sharing a dashboard grants view permissions to its component data seamlessly. ### Environment * **Superset version:** 6.1.0 * **Feature:** Dashboard Permissions / Dataset Access Control (RBAC) --- GitHub link: https://github.com/apache/superset/discussions/42924 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
