dosubot[bot] commented on issue #30927:
URL: https://github.com/apache/superset/issues/30927#issuecomment-2503120199

   <!-- Answer -->
   The issue you're facing might be due to missing permission checks for the "+ 
DASHBOARD" and "+ CHART" buttons. In Superset, permissions are typically 
enforced through functions that check user roles and permissions before 
allowing access to certain UI elements. However, it seems these checks might 
not be correctly implemented for these buttons.
   
   To resolve this, you would need to ensure that the code responsible for 
rendering these buttons includes proper permission checks. Specifically, the 
buttons should only be visible to users who have the necessary permissions to 
create dashboards and charts. This typically involves checking if the user has 
the 'can_write' permission for the 'Dashboard' and 'Dataset' views, 
respectively 
<sup>[[1]](https://github.com/apache/superset/blob/master/superset-frontend/src/dashboard/util/permissionUtils.ts)</sup><sup>[[2]](https://github.com/apache/superset/blob/master/superset-frontend/src/pages/ChartCreation/index.tsx)</sup>.
   
   If you're able to modify the code, you could add these permission checks to 
the components responsible for rendering the buttons. If not, this might be 
something to report as a bug to the maintainers for further investigation.
   
   
   <!-- Dosu Comment Footer -->
   *To continue talking to [Dosu](https://dosu.dev), mention @dosu.*
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to