[RBAC]add import/export of roles with permissions

[lulugll]

Develop a new feature that exports and imports customized Roles with permissions from one host to another on Superset.

Use case: export some specific Roles from instance A and import the exported Roles data into instance B on Superset. We don't want to always export the whole Roles data; just some specific Roles data.

Possible solution: adapt the code (dpgaspar/Flask-AppBuilder#1662) here to implement the feature.

[junlincc]

@amitmiran137 you wanna take the lead to collaborate?

[nytai]

@lulugll Does that FAB feature not work for superset?

[jhult]

Somewhat related to #16157.

[jhult]

I created a little script to export roles (and pretty it up). I'm using Docker and Prettier (for nice JSON formatting and git diffing) but you could pretty easily alter this script to strip out (or ignore) those parts:

#!/bin/bash

# Run from machine where container/app is running

# May need to first do these 2 first, otherwise flask may not run
# docker exec -it superset_app pip install Jinja2==2.11.3
# docker exec -it superset_app pip install jsonschema==3.2.0

OUTPUT_FILE=roles_export.json
OUTPUT_PATH=/app/$OUTPUT_FILE
docker exec -it superset_app flask fab export-roles -path $OUTPUT_PATH
docker cp superset_app:$OUTPUT_PATH .

# May need to install prettier if it is not already installed
# npm install -g prettier
prettier $OUTPUT_FILE --write

This script is Unlicensed and thus is free and unencumbered software released into the public domain.

[nikhil-kuyya-talentas]

we have the export of roles right, just want to understand do we have any issue in roles export/import or something else.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. For admin, please label this issue .pinned to prevent stale bot from closing the issue.

[jhult]

Bump. It would be nice to make this available from the UI.

[rusackas]

Anyone still have interest in this? Tempted to close it due to inactivity, or ask for it to be moved to an Ideas thread in Discussions (since it's more feature request than but). Before I do, maybe someone on the thread is able to open a PR and/or propose the changes needed?

[prb219]

This would be very useful feature for us.

[michael-s-molina]

Converting to a GitHub discussion as it's more of a feature request than an issue.