fix: prevent alpha role users to delete and edit non owning Dashboards

[luizotavio32]

SUMMARY

Users with the alpha role in Superset can interact with the options edit and delete for dashboards they do not own through the dashboard list, although the action gets blocked later, users shouldn't be able to interact with these buttons.

With this Pull Request, edit and delete options will now be unavailable for dashboards where the user is not the owner.

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

BEFORE:

Screen.Recording.2025-12-19.at.16.47.29.mov

AFTER:

Screen.Recording.2025-12-19.at.16.17.35.mov

TESTING INSTRUCTIONS

Try deleting or editing a non owning dashboard with a Alpha role user

ADDITIONAL INFORMATION

• Has associated issue:
• Required feature flags:
• Changes UI
• Includes DB Migration (follow approval process in SIP-59)
  • Migration is atomic, supports rollback & is backwards-compatible
  • Confirm DB migration upgrade and downgrade tested
  • Runtime estimates and downtime expectations provided
• Introduces new feature or API
• Removes existing feature or API

@michael-s-molina

[michael-s-molina]

@luizotavio32 Thanks for the PR. The description is misleading because even though the edit and delete options appear on the list, its actual execution is blocked later. Also, the fix should be to hide unavailable actions instead of adding a tooltip as this is the pattern used in other places.

[luizotavio32]

@kasiazjc how should we output these options to the users? Datasets page implements the same tooltip as shown in the AFTER video, blocking the edit button. @michael-s-molina is suggesting to not show the buttons at all for the users that aren't the owner of the dashboard, like in the video below

Screen.Recording.2025-12-22.at.10.58.06.mov

[sadpandajoe]

Superset uses Git pre-commit hooks courtesy of pre-commit. To install run the following:

pip3 install -r requirements/development.txt
pre-commit install

A series of checks will now run when you make a git commit.

Alternatively it is possible to run pre-commit by running pre-commit manually:

pre-commit run --all-files