microsoft / microsoft/Microsoft-Fabric-workload-development-sample
[Bug] Viewer unable to open Artifact stored in Onelake
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 58
- Forks
- 39
- PR merge metrics
- No merged PRs in 30d
Description
Workload Manifest Schema Version (if relevant)
No response
Your Question
We have artifacts with definitions stored in onelake. When a User attempts to open and view the artifact we make a call such as
GET https://onelake.dfs.fabric.microsoft.com/(Workspace Id.)/(Asset Id.)/Files
This works fine for Users who have Contributor Role or better. However, for Users with Viewer Role we receive the error...
RESPONSE: {"error":{"code":"Forbidden","message":"User is not authorized to perform current operation for workspace '(Workspace Id.)' and artifact '(Asset Id.)'"}}
Is this intended? Is there another method we should be using to allow Viewers to read our artifact definitions from lakehouse?
Context / Background
No response
Additional References
No response
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the GET request to the OneLake endpoint for the same artifact with Viewer and Contributor roles. Review the authorization behavior for workspace and artifact access, then determine whether Viewer reads are supported or whether the project needs a documented alternative. Done means the supported behavior and access path are clearly established.
Written by the indexing model from the issue text.
Assessment
- Domain
- api, authorization, databases
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100