Calendar Heatmap: Access Permission

[Gvaraha]

Hi I have created a new Role for my users to access certain reports,
however I'm facing the challenge with which 'permission' to explicitly mention for Calendar Heatmap - chart so that once the user signs in it doesn't show access denied for the chart.

[dosubot[bot]]

Hey @Gvaraha, I'm here to help you with the access permission issue for the Calendar Heatmap. Let's get this sorted out for you!

I couldn't find specific permissions for the Calendar Heatmap chart in the repository. However, you might want to ensure that the role has access to the relevant datasets and charts. You can configure custom roles by:

1. Creating a New Role: Go to Menu -> Security -> List Roles and create a new role.
2. Assigning Permissions: Add permissions for the specific charts or dashboards in the Permissions dropdown.
3. Selecting Data Sources: Ensure the role has access to the necessary data sources.

Additionally, make sure the users have the Gamma role for basic access, and then assign the new role for specific chart access ^[1].

To continue talking to Dosu, mention @dosu.

[Gvaraha]

What if for some users I don't want to give Gamma role access just Dashboard view as new role then what all permissions should I assign for this particular chart because for every other charts it's working perfectly fine.

[dosubot[bot]]

To allow users to view a specific chart like the Calendar Heatmap without giving them the Gamma role, you'll need to ensure the custom role has the necessary permissions. Here are some steps you can follow:

1. Chart Access: Ensure the role has access to the specific chart by adding permissions related to the chart view. This might include can explore on Superset and can read on [Chart Name].

2. Dataset Access: Grant access to the datasets used by the Calendar Heatmap. This includes permissions like can read on [Dataset Name].

3. Dashboard Access: If the chart is part of a dashboard, ensure the role has can read on [Dashboard Name].

4. Database Access: Ensure the role has the necessary database access permissions, such as can read on [Database Name].

These permissions should help users access the Calendar Heatmap without needing the Gamma role. If you encounter specific permission errors, you might need to adjust based on the error messages provided.

To continue talking to Dosu, mention @dosu.

[Gvaraha]

this option can read on [Chart Name] is not available

[Gvaraha]

Also let me know if I want a create a role specific to a team so that they only access certain reports, how do I manage to do it? what all steps do I need to follow?

[dosubot[bot]]

To create a role specific to a team in Apache Superset so they only access certain reports, follow these steps:

1. Create a New Role:

   • Go to Menu -> Security -> List Roles.
   • Click the + sign to create a new role.
   • Name the role appropriately for the team.

2. Assign Permissions:

   • In the Permissions dropdown, select the specific tables or data sources the team should access.
   • Use the typeahead feature to search and select the table names.
   • Add specific permissions like can_read and can_write for ReportSchedule if needed.

3. Assign the Role to Users:

   • Assign this new role to the users in the team.

4. Verify Access:

   • Ensure that users with the new role can see only the objects (dashboards and slices) associated with the tables you assigned.

By following these steps, you can manage access to specific reports for a team ^[1][2].

To continue talking to Dosu, mention @dosu.

[Gvaraha]

How do I create permission can read on [Chart Name]?

[dosubot[bot]]

To create the permission "can read on [Chart Name]", you can use the add_pvms function with the NEW_PVMS dictionary. Here's a code snippet to guide you:

NEW_PVMS = {"Chart": ("can_read",)}

def upgrade():
    bind = op.get_bind()
    session = Session(bind=bind)

    # Add the new permissions during the migration
    add_pvms(session, NEW_PVMS)
    migrate_roles(session, PVM_MAP)
    try:
        session.commit()
    except SQLAlchemyError as ex:
        print(f"An error occurred while upgrading permissions: {ex}")
        session.rollback()

This will add the "can_read" permission to charts during a database migration. The "can read on Chart" permission is typically available to Admin, Alpha, and Gamma roles ^[1][2].

To continue talking to Dosu, mention @dosu.