[OPIK-4360] [FE] Implement view datasets permission check

[anastasiapyzhik]

Details

This PR implements comprehensive permission checks for the VIEW_DATASET permission across the frontend. Most notably, users without dataset viewing permissions can no longer access experiments at all, since experiments are fundamentally tied to datasets. This includes hiding the experiments page, sidebar navigation, and all experiment-related features. Additionally, dataset-specific functionality (optimizations, playground dataset selection, "Add to Dataset" actions) is also hidden or disabled based on permissions.

Key changes:

• Experiments are now hidden when users lack VIEW_DATASET permission (experiments are intrinsically linked to datasets)
• Added canViewDatasets permission to the frontend permission system with cascading effects on experiments
• Created DatasetsPageGuard component to restrict access to the datasets page
• Conditionally hide datasets and experiments from sidebar navigation based on permissions
• Disabled dataset selection in optimizations and playground when permission is missing
• Hidden "Add to Dataset" dropdown option and dataset-related experiment filters
• Hidden experiment filtering/grouping options in various contexts

Screenshots

Permission ON (dataset_view: true)	Permission OFF (dataset_view: false)
Sidebar: Datasets menu item visible	Sidebar: Datasets menu item hidden
Datasets page: Can view datasets	Datasets page: Page is not available
"Add to" functionality: Dataset option is visible	"Add to" functionality: Dataset option is hidden
Playground: Can select dataset	Playground: Can not select dataset
Optimization studio: Optimization runs are grouped by dataset	Optimization studio: Optimization runs shown as a flat list
Optimization studio: Optimization runs filtering is available	Optimization studio: Optimization runs filtering is not available

Change checklist

• User facing
• Documentation update

Issues

• Resolves #
• OPIK-4360

Testing

Frontend Permission Checks:

• Manually tested with and without VIEW_DATASET permission:
  • ✅ Experiments page access blocked when lacking dataset permission
  • ✅ Experiments hidden from sidebar navigation when lacking dataset permission
  • ✅ Datasets page access blocked via guard component
  • ✅ Datasets hidden from sidebar navigation
  • ✅ Dataset filtering/grouping disabled in experiments pages
  • ✅ Dataset selection disabled in Add Optimization dialog
  • ✅ Dataset selection hidden in Playground output actions
  • ✅ "Add to Dataset" option hidden from trace dropdown
  • ✅ Dataset references hidden in Compare Trials page
  • ✅ Optimizations page correctly handles dataset-related permissions
  • ✅ Verified both permissions (canViewExperiments && canViewDatasets) enforced

Documentation

• No additional documentation required (follows existing permission system patterns)

[github-actions]

📋 PR Linter Failed

❌ Missing Section. The description is missing the ## Details section.

---

❌ Missing Section. The description is missing the ## Change checklist section.

---

❌ Missing Section. The description is missing the ## Issues section.

---

❌ Missing Section. The description is missing the ## Testing section.

---

❌ Missing Section. The description is missing the ## Documentation section.

[github-actions]

📋 PR Linter Failed

❌ Missing Section. The description is missing the ## Details section.

---

❌ Missing Section. The description is missing the ## Change checklist section.

---

❌ Missing Section. The description is missing the ## Issues section.

---

❌ Missing Section. The description is missing the ## Testing section.

---

❌ Missing Section. The description is missing the ## Documentation section.

[github-actions]

📋 PR Linter Failed

❌ Missing Section. The description is missing the ## Details section.

---

❌ Missing Section. The description is missing the ## Change checklist section.

---

❌ Missing Section. The description is missing the ## Issues section.

---

❌ Missing Section. The description is missing the ## Testing section.

---

❌ Missing Section. The description is missing the ## Documentation section.

[github-actions]

🔄 Test environment deployment process has started

Phase 1: Deploying base version 1.10.24-4356 (from main branch) if environment doesn't exist
Phase 2: Building new images from PR branch nastassia/OPIK-4360/view-dataset-permission
Phase 3: Will deploy newly built version after build completes

You can monitor the progress here.

[CometActions]

✅ Test environment is now available!

To configure additional Environment variables for your environment, run [Deploy Opik AdHoc Environment workflow] (https://github.com/comet-ml/comet-deployment/actions/workflows/deploy_opik_adhoc_env.yaml)

Access Information

• URL: https://pr-5439.dev.comet.com
• Cluster: comet-ml-development
• Namespace: pr-5439
• Version: 1.10.24-5439-merge-1461
• Application logs: View in Grafana

The deployment has completed successfully and the version has been verified.