12:30 <DragoonAethis> daniels, emersion: AFAIK until Grafana 9.1 you could make a dashboard read-only but it did allow arbitrary queries against attached data sources (with the explorer)

12:31 <DragoonAethis> It wasn't just filtering etc, you could do a lot through the API, even though some features were hidden in the GUI

12:31 <DragoonAethis> As of Grafana 9.1 there's https://grafana.com/docs/grafana/latest/dashboards/dashboard-public/ which is alpha/experimental/in-progress, but prevents arbitrary queries and that should be safe to share publicly

12:33 <DragoonAethis> Now, as long as you have read-only credentials to reporting databases, just sharing access to that publicly isn't that awful and people have done it in the past (you can overload the db, but there are easier ways to do that with GitLab living next to it :P)

12:44 <daniels> DragoonAethis: hrm, that's no good, I didn't realise arbitrary queries were exposed through explore, I thought it was only the pre-made uneditable dashboards