issue in superset using iframe

[asishPatnaik2000]

how to hide exit full screen menu? in embedded dashboard using iframe we have embedded dashvboard on click of exit full screen sql lab and all options are coming for user which is wrong

[dosubot[bot]]

To hide the "Exit Full Screen" menu and prevent users from seeing options like SQL Lab in embedded Superset dashboards, use the Embedded SDK with guest tokens and a custom read-only role. This approach gives you fine-grained control over which UI elements are visible and what actions users can take.

• The Embedded SDK's embedDashboard function supports a dashboardUiConfig option. Setting hideChartControls: true will hide the chart action menu (including the 3-dots menu) in the embedded dashboard UI. You can also hide the title and tabs if needed. Example:

embedDashboard({
  id: "<dashboard_id>",
  supersetDomain: "https://your-superset-domain.com",
  mountPoint: document.getElementById("superset-container"),
  fetchGuestToken: () => fetch("/api/superset-token").then((res) => res.text()),
  dashboardUiConfig: {
    hideTitle: true,
    hideTab: true,
    hideChartControls: true, // Hides the 3-dots menu
    filters: { visible: false, expanded: false },
  },
});

• Create a custom read-only role in Superset with no permissions for SQL Lab, editing, or exporting, and assign it as the guest role in your superset_config.py.
• Enable EMBEDDED_SUPERSET and set up guest token authentication as described in the SDK documentation.

Superset also recently added logic to hide the fullscreen option in embedded dashboards, so if you use the Embedded SDK or the standalone=1 URL parameter, the fullscreen menu should be hidden automatically in embedded contexts (changelog).

If you use only iframe embedding with standalone=1, some menus may still appear, and permissions are not enforced as strictly. The SDK approach is the recommended and secure way to control embedded dashboard UI (details).

Avoid using CSS to hide menu items, as this does not remove permissions and may break with future updates (discussion).

To reply, just mention @dosu.

---

Docs are dead. Just use Dosu.

[asishPatnaik2000]

@dosu i have used suuperset image and iframe cant add code like you mentioned i have superset 4.1.4 i can only change css and superset_config.py

[dosubot[bot]]

In Superset 4.1.4, you can't fully hide the "Exit Full Screen" menu or SQL Lab options in embedded dashboards just by changing superset_config.py or using the iframe standalone parameter—these menus are controlled by frontend logic and user permissions, not by configuration or URL parameters (source).

If you want to try hiding these UI elements with CSS (not secure, but possible), you can target menu items using their Ant Design classes or data-test attributes. For example, to hide the "Exit Full Screen" option in the dashboard header dropdown, you could use:

/* Hide the fullscreen menu item in the dashboard header actions menu */
[data-test="header-actions-menu"] .ant-menu-item:has(span:contains('Exit fullscreen')) {
  display: none !important;
}

For chart menus (the 3-dots menu on each chart), you might try:

/* Hide the fullscreen menu item in chart slice menus */
.ant-dropdown-menu-item:has(span:contains('Exit fullscreen')) {
  display: none !important;
}

You can add this CSS via the CssTemplate feature in Superset (Dashboard → Edit → CSS Templates), or by overriding static assets if your deployment allows.

Important caveats:

• This only hides the menu visually; it does not remove permissions or prevent access if users know the URLs.
• CSS selectors may break after upgrades or if the menu text changes.
• Some browsers do not support :has() or :contains() in CSS, so you may need to use more generic selectors or test in your environment.

For more robust control, you would need to use the Embedded SDK with guest tokens and a custom read-only role, but that's not possible with your current setup (source).

If you want to minimize what users see, also review your user/role permissions in Superset and remove any permissions for SQL Lab, editing, or exporting from the roles used for embedding (source).

Let me know if you need help with the exact CSS selectors for your menus—sometimes the menu structure changes depending on your Superset theme or version.

To reply, just mention @dosu.

---

Docs are dead. Just use Dosu.