Want to create questions of questions with no db access

Get Help
1

Hi everyone,

we’re using Metabase(v.0.62.2.2) with a setup where our users have access to curated questions and models, but no direct database access. The goal is to let them create their own follow-up questions in their personal collections based on those existing questions or models.

However, the built-in query builder is disabled as soon as database access is removed.

Is there a reason why Metabase does not allow users to build new questions from existing questions or models without granting database permissions? In our case, the raw database is intentionally hidden because the structure and naming are too confusing for non-technical users.

We would appreciate any clarification on whether this is an expected limitation, and whether there is a recommended workaround for this use case.

2

Documented limitation. Metabase can’t keep the user from accessing all the data in the database (via joins), even through a question or model. Row/column security can limit this but that requires a paid version.

Instead of Models, use database views as the abstraction layer. Bonus points if you can define views with SECURITY DEFINER like semantics so the base tables can be made inaccessible to the Metabase user.