apache / superset

Apache Superset is a Data Visualization and Data Exploration Platform
https://superset.apache.org/
Apache License 2.0
62.56k stars 13.78k forks source link

Cannot use drill-by/drill-to without can explore on Superset permission #27900

Open icrc-fdeniger opened 7 months ago

icrc-fdeniger commented 7 months ago

Bug description

A end-user should be able to drill-by/drill-to with 2 permissons:

Currently can explore is mandatory but it gives too many privileges ( see query, open chart,...)

How to reproduce the bug

Create a user have only the permissions:

this user can't drill down.

Screenshots/recordings

No response

Superset version

3.1.2

Python version

3.10

Node version

16

Browser

Not applicable

Additional context

No response

Checklist

chakri0215 commented 5 months ago

Hi Guys,

Any update on this?

tsator commented 5 months ago

I have the same problem, the end user cannot see the drill options without the can explore on superset permission

marianysilva commented 3 months ago

I have the same problem here: I can enable drill to detail by adding the can read on Explore and can samples on Datasource permissions. However, it's noted that the can explore permission is currently mandatory but gives too many privileges.

menu (In red what I don't need) Screenshot 2024-07-31 at 10 05 53

drill to detail Screenshot 2024-07-31 at 09 56 52

Cannot use drill-by/drill-to without can explore on Superset permission #27900 chore: Add granular permissions for actions in Dashboard #27029 Slack thread

rusackas commented 3 months ago

Hmm... pinging @michael-s-molina in case he has any input here. Maybe we need to migrate to a more explicit permission?