Restricting which rows each user, role or group sees in Superset with RLS filters: regular versus base filters, group keys and how filters combine, Jinja-driven user filters, and testing RLS before dashboards go to wider audiences.
Building dynamic datasets and queries with Jinja macros such as current_username, filter_values and url_param, and the server-side template injection risk that decides who may edit datasets once templating is on.
Setting up scheduled dashboard and chart reports and threshold alerts to email and Slack: the feature flag, Celery worker and beat, Playwright screenshots, Slack app setup, and dry-run mode that silently blocks delivery.
Moving long SQL Lab queries off the web tier onto Celery workers: broker and results backend choices, worker sizing and timeouts, and how async execution changes the user experience for heavy queries.
Letting Claude, ChatGPT and other MCP clients query a self-hosted Superset through its built-in MCP server: JWT and OIDC authentication, how RBAC and row level security still apply, audit logging of tool calls and worker limits.
Rolling out SQL Lab safely: the sql_lab role and per-database access, async execution for long queries, the 6 hour default limit, query history pruning, cost estimation permissions and disallowed functions.
Modeling data for Superset users with physical and virtual (SQL) datasets, saved metrics and calculated columns: why charts query one dataset at a time, join strategies and the performance cost of views.
Designing dashboard filters users understand: native filter types, scoping to charts and tabs, cross-filters, the horizontal filter bar, default values and the effect of filters on query load and caching.
Letting users explore below a chart with Drill by and Drill to Detail: permissions that control them, their availability in embedded dashboards since 6.0 and the extra queries they send to the warehouse.
Enabling file uploads into a database for ad hoc analysis: which databases allow uploads, schema restrictions, upload size limits at the web server since 5.0 and governance of user-uploaded tables.
Building map visualizations with Superset's deck.gl charts: OpenStreetMap versus Mapbox tiles, custom tile servers, CSP and CORS settings for tiles, and performance with large point sets.
Rendering query results with a Handlebars template for layouts standard charts cannot produce: the data array, built-in helpers for dates, numbers and JSON, styling and when a custom plugin is the better choice.
Reaching databases in private networks from Superset with SSH tunneling: the SSH_TUNNELING feature flag, password versus private key authentication, local bind address and when a private network link is safer.