Skip to content

fix: hide Create scheduled report... in the Export menu on public URLs - #10076

Merged
nishantmonu51 merged 1 commit into
mainfrom
nishant/hide-scheduled-reports-public-urls
Oct 28, 2026
Merged

nishantmonu51 merged 1 commit into
mainfrom
nishant/hide-scheduled-reports-public-urls

Conversation

@nishantmonu51

Copy link
Copy Markdown
Collaborator

Public URLs (/-/share/rill_mgc_...) only grant viewing and exporting, but the Export menu in the dimension table, time dimension detail and pivot views still offered Create scheduled report..., which failed with a 403 when used.

  • Expose authContext on RuntimeClient (it was already tracked privately and is "magic" on public URL pages).
  • ExportMenu hides the scheduled report option, and skips loading the dialog, when the auth context is "magic".
  • Extend the public URL e2e test to assert that the Export menu offers CSV export but not scheduled reports for anonymous viewers.

Steps to reproduce (before this change):

  1. Open an explore dashboard in Rill Cloud, click Share → Create public URL, and open the generated link in a private window.
  2. Click a dimension to open its dimension table, then open Export.
  3. Create scheduled report... is listed; submitting the dialog returns a 403.

Closes APP-955

Checklist:

  • Covered by tests
  • Ran it and it works as intended
  • Reviewed the diff before requesting a review
  • Checked for unhandled edge cases
  • Linked the issues it closes
  • Checked if the docs need to be updated. If so, create a separate Linear DOCS issue
  • Intend to cherry-pick into the release branch
  • I'm proud of this work!

Public URLs authenticate with a magic token that only grants viewing and
exporting, so "Create scheduled report..." returned a 403 when clicked.
Expose the runtime client's auth context and hide the option when it is
"magic".
@nishantmonu51
nishantmonu51 merged commit d64ad50 into main Oct 28, 2026
18 of 19 checks passed
@nishantmonu51
nishantmonu51 deleted the nishant/hide-scheduled-reports-public-urls branch October 28, 2026 14:14
nishantmonu51 added a commit that referenced this pull request Oct 29, 2026
…Ls (#10076)

Public URLs authenticate with a magic token that only grants viewing and
exporting, so "Create scheduled report..." returned a 403 when clicked.
Expose the runtime client's auth context and hide the option when it is
"magic".

(cherry picked from commit d64ad50)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants