Cognite Streamlit - Access Rights

Related products: Authentication and Access Management

Currently the Streamlit access for the users of the project can only be prohibited if you strip the files.write and files.read capabilites from the specific user groups. This is a good temporary solution, but in case the users want to work with files inside the Streamlit applications, they cannot, since the capabilities restrict them from reading / writing files in CDF. 

Streamlit’s access rights are very limited at the moment, and the users can see the code of the applications. It would be nice to separate users from developers when it comes to Streamlit in Cognite. The same thing applies to Published / Unpublished Streamlit apps. Right now it is just a label, I am sure there were plans regarding the access rights of Streamlit, so I would like to raise these ideas to the dev team.

 

Thank you for your hard work,

Tibor Váncza

NewGathering Interest

Hi,

We are currently looking into how to best manage access control for Streamlit and will take this into consideration. Note that it’s possible to assign data sets to notebooks which allows you to control access on a more granular level than read, write. See https://docs.cognite.com/cdf/data_governance/concepts/datasets/ for an introduction to data sets.