Werk #19989: dashboards: Enforce publishing permissions when sharing
| Component | User interface | ||||
| Title | dashboards: Enforce publishing permissions when sharing | ||||
| Date | Jun 22, 2026 | ||||
| Level | Trivial Change | ||||
| Class | Bug Fix | ||||
| Compatibility | Compatible - no manual interaction needed | ||||
| Checkmk versions & editions |
|
The new dashboard frontend offered both ways of sharing a dashboard without checking the user's publishing permissions. This is now enforced, matching the behavior of the other visual types (views and reports).
Internal sharing (the "Access" settings, which make a dashboard visible to other Checkmk users):
- "All users" requires Publish dashboards.
- "Members of contact groups" requires Publish dashboards to allowed contact groups (and Publish dashboards to foreign contact groups for groups the user is not a member of).
- "Users of site" requires Publish dashboards to users of selected sites.
Public link sharing (the "Share dashboard" feature, which exposes a dashboard via a public link): creating a public link now requires Publish dashboards in addition to the edit permission. Existing links can still be disabled and deleted with the edit permission alone.
The enforcement is applied both in the user interface (share options the user is not permitted to use are no longer offered) and on the REST API (a forbidden share target is rejected). Dashboards that are already shared keep their visibility.