RBAC - Role Based Access Control (Users & Groups rights)

[BBart19 (Bart19)]

Hello everyone,

I’d really love to see the Logbook/History views get a simple role-based filter so that:

• non-admin users only see and search entities on their own dashboards, and can only call services on those entities
• admins keep full access to all entities and services

Right now non-admins can effectively gain admin rights by launching service calls from Logbook/History – a serious security gap.

I posted a more detailed feature request (including a demo video) here — the thread is now closed:

Logbook/History Filtering by Admin/User Roles

Problem Non‑admin users in the Logbook and History views can call any service on any entity – effectively gaining admin rights. This is a serious security hole: a user could, for example, shut down your Home Assistant instance or perform other unwanted actions! Proposal user – sees and searches only the entities present on their own dashboards, and can call services only on those entities admin – retains full access to all entities and services Why It Matters This issue has e…

It would be fantastic if someone from the core team (or the community) could take a look and implement this straightforward filtering mechanism.

Thanks!