fix(plugin-dashboard): a viewer whose every tile is refused sees one no-access panel, not a blank canvas (#27777)

domain:ui#2 · os-bill · session_01Utp6CY2n1JmZZKrHgtp9jC
<!-- claude-projects-attribution: {"github_login":"os-bill"} -->
_Requested by **Bill** · [project
thread](https://claude.ai/code/project/chan_016iMXWSZDzqWRWvWzdNo8wg?thread=cmsg_016iMXWSZDzqWRWvWzdNo8wgP6XkfpjCfyzzG2KwQPUZfy)_

Fixes #27491

Clause-②: no
Metadata-protocol: none

## 维护者速读

- 改了什么：观看者在仪表盘上的每个卡片都被服务器以读权限拒绝（403 /
PERMISSION_DENIED）时，画布里显示一个「无权访问」面板（锁图标 + 标题 +
一句说明），不再是标题下一片空白；部分卡片被拒、设计模式、非权限错误的表现都不变。
- 为什么改：CRM 的 Pipeline 仪表盘六个卡片共用一个数据集，普通成员打开只看到标题和「Refresh All」；维护者裁决
A（6508997538）：保留逐卡隐藏，什么都不剩时说一次。
- 风险与回滚：只动渲染层和十个语言包，不动 spec、服务端、DatasetWidget、DashboardView；403
仍是唯一判据。回滚即 revert 本 PR。
-
先看：`ui/packages/plugin-dashboard/src/DashboardRenderer.tsx`（`nothingLeftForViewer`
与 `allTilesRefusedPanel`，桌面和移动两处挂载）→ 新测试
`DashboardRenderer.allTilesRefused-27491.test.tsx` →
`ui/packages/i18n/src/locales/en.ts` 新键。
- 两分钟验证：`pnpm --dir ui exec vitest run
packages/plugin-dashboard/src/__tests__/DashboardRenderer.allTilesRefused-27491.test.tsx`，预期
5/5 通过。
- 需要你做的：无，席位落地。

## What changes

Outside design mode, a dataset tile whose query the server refuses as a
read refusal is left out of the dashboard for that viewer (the rule the
spec states in the dashboard widget docblock). When that leaves nothing
to draw, the viewer saw the dashboard header over an empty canvas, with
no message. Ruling-ref: 6508997538 (maintainer ruling A).

- `DashboardRenderer` renders its tiles once per layout (`desktopTiles`;
`metricTiles` and `otherTiles` in the mobile stack) and asks
`nothingLeftForViewer(tiles)`: not design mode, at least one refused
tile, at least one widget, and every rendered tile is `null`. The only
`null` a tile renders is the refusal drop, so the trigger is exactly
"every widget was left out as refused". A dashboard that still has any
drawable widget (a non-dataset widget, a readable tile, a tile that
failed for another reason) draws it and no panel.
- The panel is the `Empty` composition the console draws for a dashboard
the viewer may not open (`dashboard-access-denied` in `DashboardView`):
lock icon, title `dashboard.widgetForbiddenTitle`, and one new message
`dashboard.allWidgetsForbiddenMessage`. It carries
`data-testid="dashboard-all-widgets-forbidden"` and spans the full grid
(`col-span-full`). The header, its description and the refresh control
are untouched.
- `@object-ui/i18n`: `dashboard.allWidgetsForbiddenMessage` in all ten
locales, beside `widgetForbiddenMessage`. en: "You don’t have permission
to view the data behind this dashboard." (the typographic apostrophe the
neighbouring `dashboard.*` strings use).

## Tests

New
`ui/packages/plugin-dashboard/src/__tests__/DashboardRenderer.allTilesRefused-27491.test.tsx`
(5 tests), with the refusal shape `AnalyticsForbiddenError` carries
(`httpStatus: 403`, `code: 'PERMISSION_DENIED'`):

- every tile refused: the panel with both strings, both tiles queried,
no tile title, no per-tile no-access face;
- the same in the mobile layout (non-vacuity: the 2-column metric grid
is drawn);
- partial refusal: no panel, the readable tile present, the refused ones
gone;
- CONTROL design mode, every tile refused: no panel, each tile's
objectui#10899 face present;
- CONTROL a 400 on every tile: no panel, every tile and its error alert
present.

`DashboardRenderer.refusedTile-26971.test.tsx` and
`DatasetWidget.forbiddenState-10899.test.tsx` pass unchanged.

<details><summary>Readings</summary>

- Premise (before the ruling, report 6508422494): the real
`examples/app-crm` `pipeline_dashboard` through the real
`ObjectStackAdapter` with fetch answering 403 `PERMISSION_DENIED`
rendered an empty canvas; ablating the refusal drop brought the six
frames back. Scratch test, never committed.
- Ablation of this change, through `scripts/ablation-replace.mjs` on
commit 76be307: the trigger's `tiles.length > 0 && tiles.every((tile)
=> tile == null)` replaced by `false` (anchor 1 → 0, blob c9adcbb →
eb6c069cbd78): the two all-refused tests red, the three others green (2
failed / 3 passed); restored, blob == HEAD c9adcbb, `git diff HEAD`
empty. The test imports the renderer by relative path, so no dist leg.
- After merging `main` (head 24bc0b9), closure `pnpm --filter
'@object-ui/plugin-dashboard^...' build` VERDICT command-exit 0; `pnpm
--dir ui exec vitest run --maxWorkers=2 packages/plugin-dashboard/
packages/i18n/`: Test Files 286 passed (286), Tests 3266 passed, 19
skipped; lock VERDICT command-exit 0.
- Gates: see the os-dev-report on #27491.

</details>

## Acceptance notes

- The trigger is "nothing left to draw", not "every dataset tile
refused", per the ruling: a dashboard that keeps any other widget draws
no panel.
- A refused tile is still not re-queried until remount; "Refresh All"
stays as #27065 left it (ruling item 2).
- Option C of the ruling (the CRM app declaring `requiredPermissions` on
`pipeline_dashboard` and its nav item) is a separate app-lane card, not
this PR.

## Verification

`pnpm --dir ui exec vitest run
packages/plugin-dashboard/src/__tests__/DashboardRenderer.allTilesRefused-27491.test.tsx
packages/plugin-dashboard/src/__tests__/DashboardRenderer.refusedTile-26971.test.tsx
packages/plugin-dashboard/src/__tests__/DatasetWidget.forbiddenState-10899.test.tsx`
→ 3 files, 11 tests passed.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_01Utp6CXTsLkvW2GpvDwNQre

---
_Generated by [Claude
Code](https://claude.ai/code/session_01Utp6CXTsLkvW2GpvDwNQre)_

Co-authored-by: Claude <noreply@anthropic.com>

Author: objectstack-fleet[bot]

.changeset/27491-dashboard-all-tiles-refused-panel.md

@@ -0,0 +1,17 @@
+---
+'@object-ui/plugin-dashboard': patch
+'@object-ui/i18n': patch
+---
+
+fix(plugin-dashboard): a viewer whose every dashboard tile is refused sees one no-access panel, not an empty canvas
+
+Clause-②: no
+Metadata-protocol: none
+
+A tile whose data the viewer may not read is left out of the dashboard outside design mode. When every tile was left out, the viewer saw the dashboard's header over an empty canvas, with no message. `DashboardRenderer` now draws one no-access panel in the canvas in that case (lock icon, "You don’t have access", "You don’t have permission to view the data behind this dashboard."), the same face the console shows for a dashboard the viewer may not open. The header, its description and the refresh control stay as they are.
+
+- A partial refusal is unchanged: the refused tiles leave, the rest reflow, no message.
+- In design mode every tile stays and draws its own no-access state; no panel.
+- A failure that is not a read refusal keeps every tile and its error; no panel.
+- A dashboard with no widgets draws no panel.
+- `@object-ui/i18n` adds `dashboard.allWidgetsForbiddenMessage` in all ten locales.

ui/packages/i18n/src/locales/ar.ts

@@ -1612,6 +1612,7 @@ const ar = {
     datasetUnsupported: "مصدر البيانات هذا لا يدعم استعلامات مجموعات البيانات.",
     widgetForbiddenTitle: "لا تملك صلاحية الوصول",
     widgetForbiddenMessage: "ليست لديك صلاحية لعرض البيانات الخاصة بهذه الأداة.",
+    allWidgetsForbiddenMessage: "ليست لديك صلاحية لعرض البيانات الخاصة بلوحة التحكم هذه.",
     details: "التفاصيل",
     exportCsv: "تصدير CSV",
     openInList: "فتح في القائمة",

ui/packages/i18n/src/locales/de.ts

@@ -1421,6 +1421,7 @@ const de = {
     datasetUnsupported: "Diese Datenquelle unterstützt keine Dataset-Abfragen.",
     widgetForbiddenTitle: "Kein Zugriff",
     widgetForbiddenMessage: "Sie haben keine Berechtigung, die Daten dieses Widgets anzuzeigen.",
+    allWidgetsForbiddenMessage: "Sie haben keine Berechtigung, die Daten dieses Dashboards anzuzeigen.",
     details: "Details",
     exportCsv: "CSV exportieren",
     openInList: "In Liste öffnen",

ui/packages/i18n/src/locales/en.ts

@@ -1806,6 +1806,7 @@ const en = {
     datasetUnsupported: 'This data source does not support dataset queries.',
     widgetForbiddenTitle: 'You don’t have access',
     widgetForbiddenMessage: 'You don’t have permission to view the data behind this widget.',
+    allWidgetsForbiddenMessage: 'You don’t have permission to view the data behind this dashboard.',
     details: 'Details',
     exportCsv: 'Export CSV',
     openInList: 'Open in list',

ui/packages/i18n/src/locales/es.ts

@@ -1471,6 +1471,7 @@ const es = {
     datasetUnsupported: "Esta fuente de datos no admite consultas de dataset.",
     widgetForbiddenTitle: "Sin acceso",
     widgetForbiddenMessage: "No tienes permiso para ver los datos de este widget.",
+    allWidgetsForbiddenMessage: "No tienes permiso para ver los datos de este panel.",
     details: "Detalles",
     exportCsv: "Exportar CSV",
     openInList: "Abrir en la lista",

ui/packages/i18n/src/locales/fr.ts

@@ -1467,6 +1467,7 @@ const fr = {
     datasetUnsupported: "Cette source de données ne prend pas en charge les requêtes de dataset.",
     widgetForbiddenTitle: "Accès refusé",
     widgetForbiddenMessage: "Vous n’avez pas l’autorisation de voir les données de ce widget.",
+    allWidgetsForbiddenMessage: "Vous n’avez pas l’autorisation de voir les données de ce tableau de bord.",
     details: "Détails",
     exportCsv: "Exporter en CSV",
     openInList: "Ouvrir dans la liste",

ui/packages/i18n/src/locales/ja.ts

@@ -1421,6 +1421,7 @@ const ja = {
     datasetUnsupported: "このデータソースはデータセットクエリに対応していません。",
     widgetForbiddenTitle: "アクセス権がありません",
     widgetForbiddenMessage: "このウィジェットのデータを表示する権限がありません。",
+    allWidgetsForbiddenMessage: "このダッシュボードのデータを表示する権限がありません。",
     details: "詳細",
     exportCsv: "CSV で書き出す",
     openInList: "リストで開く",

ui/packages/i18n/src/locales/ko.ts

@@ -1421,6 +1421,7 @@ const ko = {
     datasetUnsupported: "이 데이터 소스는 데이터셋 쿼리를 지원하지 않습니다.",
     widgetForbiddenTitle: "접근 권한 없음",
     widgetForbiddenMessage: "이 위젯의 데이터를 볼 수 있는 권한이 없습니다.",
+    allWidgetsForbiddenMessage: "이 대시보드의 데이터를 볼 수 있는 권한이 없습니다.",
     details: "세부 정보",
     exportCsv: "CSV 내보내기",
     openInList: "목록에서 열기",

ui/packages/i18n/src/locales/pt.ts

@@ -1466,6 +1466,7 @@ const pt = {
     datasetUnsupported: "Esta fonte de dados não oferece suporte a consultas de dataset.",
     widgetForbiddenTitle: "Sem acesso",
     widgetForbiddenMessage: "Você não tem permissão para ver os dados deste widget.",
+    allWidgetsForbiddenMessage: "Você não tem permissão para ver os dados deste painel.",
     details: "Detalhes",
     exportCsv: "Exportar CSV",
     openInList: "Abrir na lista",

ui/packages/i18n/src/locales/ru.ts

@@ -1521,6 +1521,7 @@ const ru = {
     datasetUnsupported: "Этот источник данных не поддерживает запросы к наборам данных.",
     widgetForbiddenTitle: "Нет доступа",
     widgetForbiddenMessage: "У вас нет прав на просмотр данных этого виджета.",
+    allWidgetsForbiddenMessage: "У вас нет прав на просмотр данных этой панели.",
     details: "Подробности",
     exportCsv: "Экспорт в CSV",
     openInList: "Открыть в списке",