running-elephant / datart

Datart is a next generation Data Visualization Open Platform
https://running-elephant.github.io/datart-docs/
Apache License 2.0
1.99k stars 591 forks source link

Question: Dashboard needs explicit view permission to work? #1262

Closed clementchong closed 2 years ago

clementchong commented 2 years ago

I have a dashboard with few vizs. These vizs are built on top of data views in datart. When I publish the dashboard and grant to a user role, the user see error message that view permission is not granted. I need to allow view permision on view for dashboard to use.

This way, the user has read access to the view and SQL in datart. Is it possible to only allow "use" view permission without exposing the view itself?

scottsut commented 2 years ago

We separate viz and view to manage permissions to ensure absolute data access security, but this also brings the tedious operation. We plan to add a shortcut action, which can also grant access permissions to its associated view when authorizing viz. The switch of this shortcut action may be in the organization settings, and the organization owner can choose whether to enable it or not.

clementchong commented 2 years ago

We separate viz and view to manage permissions to ensure absolute data access security, but this also brings the tedious operation. We plan to add a shortcut action, which can also grant access permissions to its associated view when authorizing viz. The switch of this shortcut action may be in the organization settings, and the organization owner can choose whether to enable it or not.

Ok, sounds like it may be a single on/off master switch rather than at each view level. Still looking forward to try it out. Thank you!

clementchong commented 2 years ago

It looks like the current version can support this. I tested with below setting and found the users can access the vizs without exposing the views and data source.

image

clementchong commented 2 years ago

If this understanding is as expected based on product design, then we can close this topic.

scottsut commented 2 years ago

It looks like the current version can support this. I tested with below setting and found the users can access the vizs without exposing the views and data source.

image

Looks like I misunderstood your question. 😂

Yes, it works.

clementchong commented 2 years ago

👍 thank you!