Sharing

Dashboards support two separate forms of sharing:

• Member access requires a Dashgrid account, authentication, and an authorized workspace or dashboard role.
• Public access publishes a read-only presentation at the dashboard's existing URL. Anyone can open it without signing in.

Roles and permissions

Viewer

View the dashboard and its widgets. Viewers cannot edit the dashboard, manage data or keys, change sharing, or publish it.

Editor

Includes Viewer access and can edit widgets, layout, dashboard settings, data buckets, and API keys. Editors cannot manage members or publish the dashboard.

Admin

Includes Editor access, can manage the workspace and assign Viewer, Editor, or Admin roles, and can publish or unpublish dashboards. Admins cannot grant Owner or delete the dashboard/workspace.

Owner

Has complete administrative access, including assigning Owner, publishing or unpublishing, and deleting dashboards or workspaces.

A direct dashboard role overrides the workspace role for that dashboard, except that a workspace Owner always remains Owner. A person outside the workspace can only receive a direct dashboard Viewer role.

Share with members

Admins and Owners can open the dashboard's Access tab and select Invite to invite someone by email. Pending invitations expire after 14 days. Existing members and invitations appear in the Sharing list, where authorized managers can inspect or change their access.

The overview places State directly after User and reports each access item as Enabled, Disabled, or Invalid when its stored state does not match the expected contract. Created records when the access item was created; Joined records when membership became effective. Pending invitations have no Joined date. Invitation expiry remains enforced and visible in invitation details, but is not a separate overview column.

Member access remains private: every page and data request requires both a signed-in account and current authorization.

Publish a dashboard

The Sharing list always contains one Public item. It represents the dashboard's publication state and is not another member or a separately managed link. Its editor uses the same modal structure and controls as the other Access editors. An invalid publication state is shown explicitly and cannot be changed as though it were Disabled or Enabled.

Admins and Owners can:

1. Open Public in the Access tab.
2. Switch Public Access to Enabled.
3. Copy the dashboard title from the revealed read-only field as needed and review the canonical URL preview and exposure warning. URL help points to Dashboard settings for URL management. The preview does not publish the dashboard.
4. Type the dashboard title exactly.
5. Enter their current account password.
6. Select Make dashboard public.

The dashboard becomes public only after the server rechecks the current role, title, password, canonical path, and dashboard state. Switching the draft alone does not publish anything.

Published pages use the same canonical paths as the private application:

Dashboard: /{workspace}/{dashboard}
Widget:    /{workspace}/{dashboard}/{widget_ref}

There is no extra /widgets/ segment. Authorized members still receive the full private application at these URLs. Anonymous visitors and signed-in non-members receive only the sanitized public presentation.

Public data boundary

A published dashboard exposes its configured charts and the complete permitted history available to those widgets, with a maximum of 1000 records per request. Public widget details can show the chart, status, update indicator, and enabled history controls.

The public presentation excludes records tables, bucket names, bucket IDs, bucket-information panels, API keys, editing controls, presence, and private application/user state. Public charts poll through Dashgrid and never receive a BucketStore credential or open a public WebSocket.

Published pages may be indexed, shared, copied, cached, or retained by others. Only publish data that is appropriate for unrestricted public access.

Make a dashboard private

Open the Public item, switch State to Disabled, and select Make dashboard private. This exposure-reducing action requires confirmation but no password or title re-entry.

New public page and data requests stop immediately after the server confirms the change. Making a dashboard private cannot retract information that someone already viewed, copied, indexed, or cached. Authorized members continue to use the private dashboard at its canonical URL.