add dashboard permission

[ujhujuh]

grant permission to each dashboard manually.

[mistercrunch]

This has some complex-ish implications and we need to discuss internally whether we want to add this new dimension in the security matrix. For instance what happens now if the person has access to the dashboard but not to the underlying table(s)? What happens to permissions when someone renames a dashboard?

[xrmx]

@mistercrunch it would fail, which is backward compatible with current permissions.
The only annoying and incompatible change is that with the patch one that has access to a datasource has no more automatic access to dashboards that use that datasource.
Good catch on dashboard renaming though, that'll would be a problem.

[acorso522]

Any updates on this front? The ability to restrict users to only specific dashboards is extremely useful.

[yamyamyuo]

Authorization based on datasource is more complicated when more users in superset. Think about this scenario. It is more convenient for superset admins to grant marketing dashboards permissions to marketing team members.