You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "asishPatnaik2000 (via GitHub)" <gi...@apache.org> on 2025/12/07 12:26:03 UTC

[D] issue in superset using iframe [superset]

GitHub user asishPatnaik2000 created a discussion: issue in superset using iframe

how to hide exit full screen menu? in embedded  dashboard using iframe we have embedded dashvboard on click of exit full screen sql  lab and all options are coming for user which is wrong

GitHub link: https://github.com/apache/superset/discussions/36447

----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


Re: [D] issue in superset using iframe [superset]

Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
GitHub user dosubot[bot] added a comment to the discussion: issue in superset using iframe

<!-- Answer -->
To hide the "Exit Full Screen" menu and prevent users from seeing options like SQL Lab in embedded Superset dashboards, use the Embedded SDK with guest tokens and a custom read-only role. This approach gives you fine-grained control over which UI elements are visible and what actions users can take.

- The Embedded SDK's embedDashboard function supports a dashboardUiConfig option. Setting hideChartControls: true will hide the chart action menu (including the 3-dots menu) in the embedded dashboard UI. You can also hide the title and tabs if needed. Example:

```js
embedDashboard({
  id: "<dashboard_id>",
  supersetDomain: "https://your-superset-domain.com",
  mountPoint: document.getElementById("superset-container"),
  fetchGuestToken: () => fetch("/api/superset-token").then((res) => res.text()),
  dashboardUiConfig: {
    hideTitle: true,
    hideTab: true,
    hideChartControls: true, // Hides the 3-dots menu
    filters: { visible: false, expanded: false },
  },
});
```
- Create a custom read-only role in Superset with no permissions for SQL Lab, editing, or exporting, and assign it as the guest role in your superset_config.py.
- Enable EMBEDDED_SUPERSET and set up guest token authentication as described in the SDK documentation.

Superset also recently added logic to hide the fullscreen option in embedded dashboards, so if you use the Embedded SDK or the standalone=1 URL parameter, the fullscreen menu should be hidden automatically in embedded contexts ([changelog](https://github.com/apache/superset/blob/master/superset-frontend/CHANGELOG.md#embedded-hide-dashboard-fullscreen-option-for-embedded-context-26412-494068b6325054be076e994ca06e01efdfe83aec)).

If you use only iframe embedding with standalone=1, some menus may still appear, and permissions are not enforced as strictly. The SDK approach is the recommended and secure way to control embedded dashboard UI ([details](https://github.com/apache/superset/issues/36377)).

Avoid using CSS to hide menu items, as this does not remove permissions and may break with future updates ([discussion](https://github.com/apache/superset/discussions/36088)).


<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot).*

---
<sup>How did I do? [Good](https://app.dosu.dev/response-feedback/72cb5193-0e36-4911-8e0f-d61879594257?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/72cb5193-0e36-4911-8e0f-d61879594257?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/72cb5193-0e36-4911-8e0f-d61879594257?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/72cb5193-0e36-4911-8e0f-d61879594257?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/72cb5193-0e36-4911-8e0f-d61879594257?feedback_type=hallucination) | [Report 🐛](https://app.dosu.dev/response-feedback/72cb5193-0e36-4911-8e0f-d61879594257?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/72cb5193-0e36-4911-8e0f-d61879594257?feedback_type=other)</sup>

[![Chat with Dosu](https://dosu.dev/dosu-chat-badge.svg)](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=github)&nbsp;[![Open in Cursor](https://dosu.dev/dosu-in-cursor.svg)](https://cursor.com/link/prompt?text=To%20hide%20the%20%22Exit%20Full%20Screen%22%20menu%20and%20prevent%20users%20from%20seeing%20options%20like%20SQL%20Lab%20in%20embedded%20Superset%20dashboards%2C%20use%20the%20Embedded%20SDK%20with%20guest%20tokens%20and%20a%20custom%20read-only%20role.%20This%20approach%20gives%20you%20fine-grained%20control%20over%20which%20UI%20elements%20are%20visible%20and%20what%20actions%20users%20can%20take.%0A%0A-%20The%20Embedded%20SDK%27s%20embedDashboard%20function%20supports%20a%20dashboardUiConfig%20option.%20Setting%20hideChartControls%3A%20true%20will%20hide%20the%20chart%20action%20menu%20%28including%20the%203-dots%20menu%29%20in%20the%20embedded%20dashboard%20UI.%20You%20can%20also%20hide%20the%20title%20and%20tabs%20if%20needed.%20Example%3A%0A%0
 A%60%60%60js%0AembedDashboard%28%7B%0A%20%20id%3A%20%22%3Cdashboard_id%3E%22%2C%0A%20%20supersetDomain%3A%20%22https%3A//your-superset-domain.com%22%2C%0A%20%20mountPoint%3A%20document.getElementById%28%22superset-container%22%29%2C%0A%20%20fetchGuestToken%3A%20%28%29%20%3D%3E%20fetch%28%22/api/superset-token%22%29.then%28%28res%29%20%3D%3E%20res.text%28%29%29%2C%0A%20%20dashboardUiConfig%3A%20%7B%0A%20%20%20%20hideTitle%3A%20true%2C%0A%20%20%20%20hideTab%3A%20true%2C%0A%20%20%20%20hideChartControls%3A%20true%2C%20//%20Hides%20the%203-dots%20menu%0A%20%20%20%20filters%3A%20%7B%20visible%3A%20false%2C%20expanded%3A%20false%20%7D%2C%0A%20%20%7D%2C%0A%7D%29%3B%0A%60%60%60%0A-%20Create%20a%20custom%20read-only%20role%20in%20Superset%20with%20no%20permissions%20for%20SQL%20Lab%2C%20editing%2C%20or%20exporting%2C%20and%20assign%20it%20as%20the%20guest%20role%20in%20your%20superset_config.py.%0A-%20Enable%20EMBEDDED_SUPERSET%20and%20set%20up%20guest%20token%20authentication%20as%20describe
 d%20in%20the%20SDK%20documentation.%0A%0ASuperset%20also%20recently%20added%20logic%20to%20hide%20the%20fullscreen%20option%20in%20embedded%20dashboards%2C%20so%20if%20you%20use%20the%20Embedded%20SDK%20or%20the%20standalone%3D1%20URL%20parameter%2C%20the%20fullscreen%20menu%20should%20be%20hidden%20automatically%20in%20embedded%20contexts%C2%A0%28%5Bchangelog%5D%28https%3A//github.com/apache/superset/blob/master/superset-frontend/CHANGELOG.md%23embedded-hide-dashboard-fullscreen-option-for-embedded-context-26412-494068b6325054be076e994ca06e01efdfe83aec%29%29.%0A%0AIf%20you%20use%20only%20iframe%20embedding%20with%20standalone%3D1%2C%20some%20menus%20may%20still%20appear%2C%20and%20permissions%20are%20not%20enforced%20as%20strictly.%20The%20SDK%20approach%20is%20the%20recommended%20and%20secure%20way%20to%20control%20embedded%20dashboard%20UI%C2%A0%28%5Bdetails%5D%28https%3A//github.com/apache/superset/issues/36377%29%29.%0A%0AAvoid%20using%20CSS%20to%20hide%20menu%20items%2C%20as%2
 0this%20does%20not%20remove%20permissions%20and%20may%20break%20with%20future%20updates%C2%A0%28%5Bdiscussion%5D%28https%3A//github.com/apache/superset/discussions/36088%29%29.)&nbsp;[![Join Discord](https://img.shields.io/badge/join-5865F2?logo=discord&logoColor=white&label=)](https://go.dosu.dev/discord-bot)&nbsp;[![Share on X](https://img.shields.io/badge/X-share-black)](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/discussions/36447)

GitHub link: https://github.com/apache/superset/discussions/36447#discussioncomment-15186053

----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


Re: [D] issue in superset using iframe [superset]

Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
GitHub user dosubot[bot] edited a comment on the discussion: issue in superset using iframe

<!-- Answer -->
To hide the "Exit Full Screen" menu and prevent users from seeing options like SQL Lab in embedded Superset dashboards, use the Embedded SDK with guest tokens and a custom read-only role. This approach gives you fine-grained control over which UI elements are visible and what actions users can take.

- The Embedded SDK's embedDashboard function supports a dashboardUiConfig option. Setting hideChartControls: true will hide the chart action menu (including the 3-dots menu) in the embedded dashboard UI. You can also hide the title and tabs if needed. Example:

```js
embedDashboard({
  id: "<dashboard_id>",
  supersetDomain: "https://your-superset-domain.com",
  mountPoint: document.getElementById("superset-container"),
  fetchGuestToken: () => fetch("/api/superset-token").then((res) => res.text()),
  dashboardUiConfig: {
    hideTitle: true,
    hideTab: true,
    hideChartControls: true, // Hides the 3-dots menu
    filters: { visible: false, expanded: false },
  },
});
```
- Create a custom read-only role in Superset with no permissions for SQL Lab, editing, or exporting, and assign it as the guest role in your superset_config.py.
- Enable EMBEDDED_SUPERSET and set up guest token authentication as described in the SDK documentation.

Superset also recently added logic to hide the fullscreen option in embedded dashboards, so if you use the Embedded SDK or the standalone=1 URL parameter, the fullscreen menu should be hidden automatically in embedded contexts ([changelog](https://github.com/apache/superset/blob/master/superset-frontend/CHANGELOG.md#embedded-hide-dashboard-fullscreen-option-for-embedded-context-26412-494068b6325054be076e994ca06e01efdfe83aec)).

If you use only iframe embedding with standalone=1, some menus may still appear, and permissions are not enforced as strictly. The SDK approach is the recommended and secure way to control embedded dashboard UI ([details](https://github.com/apache/superset/issues/36377)).

Avoid using CSS to hide menu items, as this does not remove permissions and may break with future updates ([discussion](https://github.com/apache/superset/discussions/36088)).


<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=reply-with-mention&utm_term=apache%2Fsuperset).*

---

Docs are dead. Just use [Dosu](https://dosu.dev?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-tagline&utm_term=apache%2Fsuperset).

[![Leave Feedback](https://img.shields.io/badge/Leave%20Feedback-555555?style=flat)](https://app.dosu.dev/response-feedback?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-feedback&utm_term=apache%2Fsuperset&message_id=72cb5193-0e36-4911-8e0f-d61879594257) [![Ask Dosu about superset](https://img.shields.io/badge/Ask%20Dosu%20about%20superset-2f7b3f?style=flat&logo=data%3Aimage%2Fsvg%2Bxml%3Bbase64%2CPHN2ZyB3aWR0aD0iODYiIGhlaWdodD0iODkiIHZpZXdCb3g9IjAgMCA4NiA4OSIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48cGF0aCBkPSJNNS4yOTIzNiAxMi43OTI4TDE3Ljc1OTMgNi42ODE4OFY3Mi41NjY3TDUuMjkyMzYgODQuMDYxOFYxMi43OTI4WiIgZmlsbD0iI0I0QkI5MSIvPjxwYXRoIGQ9Ik0xOC4yNTc1IDczLjExOTZMNTkuMTMyOSA3Mi43NDhMNTEuNzAxMSA4Mi40MDk1TDI5LjAzMzggODYuMjkxTDYuMjM5NjIgODUuMTU1NEwxOC4yNTc1IDczLjExOTZaIiBmaWxsPSIjNzc4NTYxIi8%2BPHBhdGggZD0iTTE3LjQ5MTYgMy43MzYzM0wzLjU4NTU3IDEyLjcwOTlWODMuNTc5MkMzLjU4NTU3IDg0Ljc1NDIgNC45ODU2MyA4NS4zNjUyIDUuODQ3MDUg
 ODQuNTY2TDE5LjYyOTYgNzEuNzgwMSIgc3Ryb2tlPSJibGFjayIgc3Ryb2tlLXdpZHRoPSI2LjQyODQ0IiBzdHJva2UtbGluZWNhcD0icm91bmQiLz48bWFzayBpZD0iZG9zdS1kLWN1dG91dCIgZmlsbD0id2hpdGUiPjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNNDAuNzA0IDAuNTE4MDY2SDE3LjA0MzlWNzYuMjIyMUg0MC43MDRINDIuNTgwNUg0Ny44MDEzQzY4LjcwNjQgNzYuMjIyMSA4NS42NTMzIDU5LjI3NTIgODUuNjUzMyAzOC4zNzAxQzg1LjY1MzMgMTcuNDY1IDY4LjcwNjMgMC41MTgwNjYgNDcuODAxMyAwLjUxODA2Nkg0Mi41ODA1SDQwLjcwNFoiLz48L21hc2s%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
 IHN0cm9rZS1saW5lY2FwPSJyb3VuZCIgc3Ryb2tlLWxpbmVqb2luPSJyb3VuZCIvPjxwYXRoIGQ9Ik0wLjM0ODYzMyA4NS40OTQ2QzAuMzQ4NjMzIDg1LjQ5NDYgMjkuNDg1NiA4NS44MzA5IDM0LjgwOSA4NS42OThDNDQuODMzNyA4NS40NDc3IDUxLjI4NzIgODQuNDAyIDU3LjUyNjkgNzguOTcyNEM2Mi44MTI5IDc0LjM3MjcgNzUuMTM0MiA1OS42ODM2IDc1LjEzNDIgNTkuNjgzNiIgc3Ryb2tlPSJibGFjayIgc3Ryb2tlLXdpZHRoPSI2LjE2NDgyIi8%2BPC9zdmc%2B)](https://github.dosu.com/apache/superset?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-ask-repo&utm_term=apache%2Fsuperset) [![Share Dosu with your team](https://img.shields.io/badge/Share%20Dosu%20with%20your%20team-1f6feb?style=flat)](https://app.dosu.dev/signup?referrer=openSource&source=github-footer&utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-share-team&utm_term=apache%2Fsuperset)

GitHub link: https://github.com/apache/superset/discussions/36447#discussioncomment-15186053

----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


Re: [D] issue in superset using iframe [superset]

Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
GitHub user dosubot[bot] edited a comment on the discussion: issue in superset using iframe

<!-- Answer -->
In Superset 4.1.4, you can't fully hide the "Exit Full Screen" menu or SQL Lab options in embedded dashboards just by changing superset_config.py or using the iframe standalone parameter—these menus are controlled by frontend logic and user permissions, not by configuration or URL parameters [(source)](https://github.com/apache/superset/issues/36377).

If you want to try hiding these UI elements with CSS (not secure, but possible), you can target menu items using their Ant Design classes or data-test attributes. For example, to hide the "Exit Full Screen" option in the dashboard header dropdown, you could use:

```css
/* Hide the fullscreen menu item in the dashboard header actions menu */
[data-test="header-actions-menu"] .ant-menu-item:has(span:contains('Exit fullscreen')) {
  display: none !important;
}
```

For chart menus (the 3-dots menu on each chart), you might try:

```css
/* Hide the fullscreen menu item in chart slice menus */
.ant-dropdown-menu-item:has(span:contains('Exit fullscreen')) {
  display: none !important;
}
```

You can add this CSS via the CssTemplate feature in Superset (Dashboard → Edit → CSS Templates), or by overriding static assets if your deployment allows.

Important caveats:
- This only hides the menu visually; it does not remove permissions or prevent access if users know the URLs.
- CSS selectors may break after upgrades or if the menu text changes.
- Some browsers do not support `:has()` or `:contains()` in CSS, so you may need to use more generic selectors or test in your environment.

For more robust control, you would need to use the Embedded SDK with guest tokens and a custom read-only role, but that's not possible with your current setup [(source)](https://github.com/apache/superset/issues/36377).

If you want to minimize what users see, also review your user/role permissions in Superset and remove any permissions for SQL Lab, editing, or exporting from the roles used for embedding [(source)](https://github.com/apache/superset/issues/32183).

Let me know if you need help with the exact CSS selectors for your menus—sometimes the menu structure changes depending on your Superset theme or version.


<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=reply-with-mention&utm_term=apache%2Fsuperset).*

---

Docs are dead. Just use [Dosu](https://dosu.dev?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-tagline&utm_term=apache%2Fsuperset).

[![Leave Feedback](https://img.shields.io/badge/Leave%20Feedback-555555?style=flat)](https://app.dosu.dev/response-feedback?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-feedback&utm_term=apache%2Fsuperset&message_id=c761f091-eaf3-4659-9227-171c98212461) [![Ask Dosu about superset](https://img.shields.io/badge/Ask%20Dosu%20about%20superset-2f7b3f?style=flat&logo=data%3Aimage%2Fsvg%2Bxml%3Bbase64%2CPHN2ZyB3aWR0aD0iODYiIGhlaWdodD0iODkiIHZpZXdCb3g9IjAgMCA4NiA4OSIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48cGF0aCBkPSJNNS4yOTIzNiAxMi43OTI4TDE3Ljc1OTMgNi42ODE4OFY3Mi41NjY3TDUuMjkyMzYgODQuMDYxOFYxMi43OTI4WiIgZmlsbD0iI0I0QkI5MSIvPjxwYXRoIGQ9Ik0xOC4yNTc1IDczLjExOTZMNTkuMTMyOSA3Mi43NDhMNTEuNzAxMSA4Mi40MDk1TDI5LjAzMzggODYuMjkxTDYuMjM5NjIgODUuMTU1NEwxOC4yNTc1IDczLjExOTZaIiBmaWxsPSIjNzc4NTYxIi8%2BPHBhdGggZD0iTTE3LjQ5MTYgMy43MzYzM0wzLjU4NTU3IDEyLjcwOTlWODMuNTc5MkMzLjU4NTU3IDg0Ljc1NDIgNC45ODU2MyA4NS4zNjUyIDUuODQ3MDUg
 ODQuNTY2TDE5LjYyOTYgNzEuNzgwMSIgc3Ryb2tlPSJibGFjayIgc3Ryb2tlLXdpZHRoPSI2LjQyODQ0IiBzdHJva2UtbGluZWNhcD0icm91bmQiLz48bWFzayBpZD0iZG9zdS1kLWN1dG91dCIgZmlsbD0id2hpdGUiPjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNNDAuNzA0IDAuNTE4MDY2SDE3LjA0MzlWNzYuMjIyMUg0MC43MDRINDIuNTgwNUg0Ny44MDEzQzY4LjcwNjQgNzYuMjIyMSA4NS42NTMzIDU5LjI3NTIgODUuNjUzMyAzOC4zNzAxQzg1LjY1MzMgMTcuNDY1IDY4LjcwNjMgMC41MTgwNjYgNDcuODAxMyAwLjUxODA2Nkg0Mi41ODA1SDQwLjcwNFoiLz48L21hc2s%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
 yNC4xNDEyIDc2LjIyMjFWMC41MTgwNjZIOS45NDY2OVY3Ni4yMjIxSDI0LjE0MTJaTTQwLjcwNCA2OS4xMjQ5SDE3LjA0MzlWODMuMzE5NEg0MC43MDRWNjkuMTI0OVpNNDIuNTgwNSA2OS4xMjQ5SDQwLjcwNFY4My4zMTk0SDQyLjU4MDVWNjkuMTI0OVpNNDcuODAxMyA2OS4xMjQ5SDQyLjU4MDVWODMuMzE5NEg0Ny44MDEzVjY5LjEyNDlaTTc4LjU1NiAzOC4zNzAxQzc4LjU1NiA1NS4zNTU1IDY0Ljc4NjcgNjkuMTI0OSA0Ny44MDEzIDY5LjEyNDlWODMuMzE5NEM3Mi42MjYxIDgzLjMxOTQgOTIuNzUwNSA2My4xOTQ5IDkyLjc1MDUgMzguMzcwMUg3OC41NTZaTTQ3LjgwMTMgNy42MTUzMkM2NC43ODY2IDcuNjE1MzIgNzguNTU2IDIxLjM4NDcgNzguNTU2IDM4LjM3MDFIOTIuNzUwNUM5Mi43NTA1IDEzLjU0NTMgNzIuNjI2IC02LjU3OTE5IDQ3LjgwMTMgLTYuNTc5MTlWNy42MTUzMlpNNDIuNTgwNSA3LjYxNTMySDQ3LjgwMTNWLTYuNTc5MTlINDIuNTgwNVY3LjYxNTMyWk00MC43MDQgNy42MTUzMkg0Mi41ODA1Vi02LjU3OTE5SDQwLjcwNFY3LjYxNTMyWiIgZmlsbD0iYmxhY2siIG1hc2s9InVybCgjZG9zdS1kLWN1dG91dCkiLz48cGF0aCBkPSJNNjguOTIxNSAzNi4wMTM1QzY4LjkyMTUgMzYuMDEzNSA2NS43MzY5IDQ5LjQ3MzggNTEuNDIzMSA0OS40NzM4QzM3LjEwOTMgNDkuNDczOCAzMi41Nzg3IDM3LjM1OTYgMzIuNTc4NyAzNi4wMTM1IiBzdHJva2U9ImJsYWNrIiBzdHJva2Utd2lkdGg9IjcuNjkxNjEi
 IHN0cm9rZS1saW5lY2FwPSJyb3VuZCIgc3Ryb2tlLWxpbmVqb2luPSJyb3VuZCIvPjxwYXRoIGQ9Ik0wLjM0ODYzMyA4NS40OTQ2QzAuMzQ4NjMzIDg1LjQ5NDYgMjkuNDg1NiA4NS44MzA5IDM0LjgwOSA4NS42OThDNDQuODMzNyA4NS40NDc3IDUxLjI4NzIgODQuNDAyIDU3LjUyNjkgNzguOTcyNEM2Mi44MTI5IDc0LjM3MjcgNzUuMTM0MiA1OS42ODM2IDc1LjEzNDIgNTkuNjgzNiIgc3Ryb2tlPSJibGFjayIgc3Ryb2tlLXdpZHRoPSI2LjE2NDgyIi8%2BPC9zdmc%2B)](https://github.dosu.com/apache/superset?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-ask-repo&utm_term=apache%2Fsuperset) [![Share Dosu with your team](https://img.shields.io/badge/Share%20Dosu%20with%20your%20team-1f6feb?style=flat)](https://app.dosu.dev/signup?referrer=openSource&source=github-footer&utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=static-docs-share-team&utm_term=apache%2Fsuperset)

GitHub link: https://github.com/apache/superset/discussions/36447#discussioncomment-15186079

----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


Re: [D] issue in superset using iframe [superset]

Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
GitHub user dosubot[bot] added a comment to the discussion: issue in superset using iframe

<!-- Answer -->
In Superset 4.1.4, you can't fully hide the "Exit Full Screen" menu or SQL Lab options in embedded dashboards just by changing superset_config.py or using the iframe standalone parameter—these menus are controlled by frontend logic and user permissions, not by configuration or URL parameters [(source)](https://github.com/apache/superset/issues/36377).

If you want to try hiding these UI elements with CSS (not secure, but possible), you can target menu items using their Ant Design classes or data-test attributes. For example, to hide the "Exit Full Screen" option in the dashboard header dropdown, you could use:

```css
/* Hide the fullscreen menu item in the dashboard header actions menu */
[data-test="header-actions-menu"] .ant-menu-item:has(span:contains('Exit fullscreen')) {
  display: none !important;
}
```

For chart menus (the 3-dots menu on each chart), you might try:

```css
/* Hide the fullscreen menu item in chart slice menus */
.ant-dropdown-menu-item:has(span:contains('Exit fullscreen')) {
  display: none !important;
}
```

You can add this CSS via the CssTemplate feature in Superset (Dashboard → Edit → CSS Templates), or by overriding static assets if your deployment allows.

Important caveats:
- This only hides the menu visually; it does not remove permissions or prevent access if users know the URLs.
- CSS selectors may break after upgrades or if the menu text changes.
- Some browsers do not support `:has()` or `:contains()` in CSS, so you may need to use more generic selectors or test in your environment.

For more robust control, you would need to use the Embedded SDK with guest tokens and a custom read-only role, but that's not possible with your current setup [(source)](https://github.com/apache/superset/issues/36377).

If you want to minimize what users see, also review your user/role permissions in Superset and remove any permissions for SQL Lab, editing, or exporting from the roles used for embedding [(source)](https://github.com/apache/superset/issues/32183).

Let me know if you need help with the exact CSS selectors for your menus—sometimes the menu structure changes depending on your Superset theme or version.


<!-- Dosu Comment Footer -->
*To reply, just mention [@dosu](https://go.dosu.dev/dosubot).*

---
<sup>How did I do? [Good](https://app.dosu.dev/response-feedback/c761f091-eaf3-4659-9227-171c98212461?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/c761f091-eaf3-4659-9227-171c98212461?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/c761f091-eaf3-4659-9227-171c98212461?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/c761f091-eaf3-4659-9227-171c98212461?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/c761f091-eaf3-4659-9227-171c98212461?feedback_type=hallucination) | [Report 🐛](https://app.dosu.dev/response-feedback/c761f091-eaf3-4659-9227-171c98212461?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/c761f091-eaf3-4659-9227-171c98212461?feedback_type=other)</sup>

[![Chat with Dosu](https://dosu.dev/dosu-chat-badge.svg)](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=github)&nbsp;[![Open in Cursor](https://dosu.dev/dosu-in-cursor.svg)](https://cursor.com/link/prompt?text=In%20Superset%204.1.4%2C%20you%20can%27t%20fully%20hide%20the%20%22Exit%20Full%20Screen%22%20menu%20or%20SQL%20Lab%20options%20in%20embedded%20dashboards%20just%20by%20changing%20superset_config.py%20or%20using%20the%20iframe%20standalone%20parameter%E2%80%94these%20menus%20are%20controlled%20by%20frontend%20logic%20and%20user%20permissions%2C%20not%20by%20configuration%20or%20URL%20parameters%20%5B%28source%29%5D%28https%3A//github.com/apache/superset/issues/36377%29.%0A%0AIf%20you%20want%20to%20try%20hiding%20these%20UI%20elements%20with%20CSS%20%28not%20secure%2C%20but%20possible%29%2C%20you%20can%20target%20menu%20items%20using%20their%20Ant%20Design%20classes%20or%20data-test%20attributes.%20For%20example%2C%20to%20hide%20the%20%22Exit%20Full%20S
 creen%22%20option%20in%20the%20dashboard%20header%20dropdown%2C%20you%20could%20use%3A%0A%0A%60%60%60css%0A/%2A%20Hide%20the%20fullscreen%20menu%20item%20in%20the%20dashboard%20header%20actions%20menu%20%2A/%0A%5Bdata-test%3D%22header-actions-menu%22%5D%20.ant-menu-item%3Ahas%28span%3Acontains%28%27Exit%20fullscreen%27%29%29%20%7B%0A%20%20display%3A%20none%20%21important%3B%0A%7D%0A%60%60%60%0A%0AFor%20chart%20menus%20%28the%203-dots%20menu%20on%20each%20chart%29%2C%20you%20might%20try%3A%0A%0A%60%60%60css%0A/%2A%20Hide%20the%20fullscreen%20menu%20item%20in%20chart%20slice%20menus%20%2A/%0A.ant-dropdown-menu-item%3Ahas%28span%3Acontains%28%27Exit%20fullscreen%27%29%29%20%7B%0A%20%20display%3A%20none%20%21important%3B%0A%7D%0A%60%60%60%0A%0AYou%20can%20add%20this%20CSS%20via%20the%20CssTemplate%20feature%20in%20Superset%20%28Dashboard%20%E2%86%92%20Edit%20%E2%86%92%20CSS%20Templates%29%2C%20or%20by%20overriding%20static%20assets%20if%20your%20deployment%20allows.%0A%0AImportant%20cav
 eats%3A%0A-%20This%20only%20hides%20the%20menu%20visually%3B%20it%20does%20not%20remove%20permissions%20or%20prevent%20access%20if%20users%20know%20the%20URLs.%0A-%20CSS%20selectors%20may%20break%20after%20upgrades%20or%20if%20the%20menu%20text%20changes.%0A-%20Some%20browsers%20do%20not%20support%20%60%3Ahas%28%29%60%20or%20%60%3Acontains%28%29%60%20in%20CSS%2C%20so%20you%20may%20need%20to%20use%20more%20generic%20selectors%20or%20test%20in%20your%20environment.%0A%0AFor%20more%20robust%20control%2C%20you%20would%20need%20to%20use%20the%20Embedded%20SDK%20with%20guest%20tokens%20and%20a%20custom%20read-only%20role%2C%20but%20that%27s%20not%20possible%20with%20your%20current%20setup%20%5B%28source%29%5D%28https%3A//github.com/apache/superset/issues/36377%29.%0A%0AIf%20you%20want%20to%20minimize%20what%20users%20see%2C%20also%20review%20your%20user/role%20permissions%20in%20Superset%20and%20remove%20any%20permissions%20for%20SQL%20Lab%2C%20editing%2C%20or%20exporting%20from%20the%20r
 oles%20used%20for%20embedding%20%5B%28source%29%5D%28https%3A//github.com/apache/superset/issues/32183%29.%0A%0ALet%20me%20know%20if%20you%20need%20help%20with%20the%20exact%20CSS%20selectors%20for%20your%20menus%E2%80%94sometimes%20the%20menu%20structure%20changes%20depending%20on%20your%20Superset%20theme%20or%20version.)&nbsp;[![Join Discord](https://img.shields.io/badge/join-5865F2?logo=discord&logoColor=white&label=)](https://go.dosu.dev/discord-bot)&nbsp;[![Share on X](https://img.shields.io/badge/X-share-black)](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/discussions/36447)

GitHub link: https://github.com/apache/superset/discussions/36447#discussioncomment-15186079

----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org


Re: [D] issue in superset using iframe [superset]

Posted by "asishPatnaik2000 (via GitHub)" <gi...@apache.org>.
GitHub user asishPatnaik2000 added a comment to the discussion: issue in superset using iframe

@dosu i have used suuperset image  and iframe cant add code like you mentioned i have superset 4.1.4 i can only change css and superset_config.py

GitHub link: https://github.com/apache/superset/discussions/36447#discussioncomment-15186058

----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@superset.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org