feat: add dashboard:* full access action and use "All dashboards" wildcard

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: gugu

frontend/src/app/components/users/cedar-policy-list/cedar-policy-list.component.html

@@ -55,7 +55,7 @@
                 <mat-form-field *ngIf="editNeedsDashboard" appearance="outline" class="policy-field">
                     <mat-label>Dashboard</mat-label>
                     <mat-select [(ngModel)]="editDashboardId" [ngModelOptions]="{standalone: true}">
-                        <mat-option value="__new__">New dashboards</mat-option>
+                        <mat-option value="*">All dashboards</mat-option>
                         <mat-option *ngFor="let dashboard of availableDashboards" [value]="dashboard.id">
                             {{ dashboard.name }}
                         </mat-option>

frontend/src/app/components/users/cedar-policy-list/cedar-policy-list.component.spec.ts

@@ -187,6 +187,6 @@ describe('CedarPolicyListComponent', () => {
 	it('should return correct dashboard display names', () => {
 		expect(component.getDashboardDisplayName('dash-1')).toBe('Sales Dashboard');
 		expect(component.getDashboardDisplayName('unknown')).toBe('unknown');
-		expect(component.getDashboardDisplayName('__new__')).toBe('New dashboards');
+		expect(component.getDashboardDisplayName('*')).toBe('All dashboards');
 	});
 });

frontend/src/app/components/users/cedar-policy-list/cedar-policy-list.component.ts

@@ -80,7 +80,7 @@ export class CedarPolicyListComponent {
 	}
 
 	getDashboardDisplayName(dashboardId: string): string {
-		if (dashboardId === '__new__') return 'New dashboards';
+		if (dashboardId === '*') return 'All dashboards';
 		return this.availableDashboards.find((d) => d.id === dashboardId)?.name || dashboardId;
 	}
 

frontend/src/app/lib/cedar-policy-items.ts

@@ -50,6 +50,7 @@ export const POLICY_ACTION_GROUPS: PolicyActionGroup[] = [
 	{
 		group: 'Dashboard',
 		actions: [
+			{ value: 'dashboard:*', label: 'Full dashboard access', needsTable: false, needsDashboard: true },
 			{ value: 'dashboard:read', label: 'Dashboard read', needsTable: false, needsDashboard: true },
 			{ value: 'dashboard:create', label: 'Dashboard create', needsTable: false, needsDashboard: true },
 			{ value: 'dashboard:edit', label: 'Dashboard edit', needsTable: false, needsDashboard: true },
@@ -132,8 +133,8 @@ export function policyItemsToCedarPolicy(items: CedarPolicyItem[], connectionId:
 		}
 
 		const actionRef =
-			item.action === 'table:*'
-				? `action like RocketAdmin::Action::"table:*"`
+			item.action === 'table:*' || item.action === 'dashboard:*'
+				? `action like RocketAdmin::Action::"${item.action}"`
 				: `action == RocketAdmin::Action::"${item.action}"`;
 		let resource: string;
 
@@ -144,8 +145,11 @@ export function policyItemsToCedarPolicy(items: CedarPolicyItem[], connectionId:
 				resource = `resource == RocketAdmin::Table::"${connectionId}/${item.tableName}"`;
 			}
 		} else if (item.action.startsWith('dashboard:')) {
-			const dashId = item.dashboardId || '__new__';
-			resource = `resource == RocketAdmin::Dashboard::"${connectionId}/${dashId}"`;
+			if (item.dashboardId === '*') {
+				resource = `resource like RocketAdmin::Dashboard::"${connectionId}/*"`;
+			} else {
+				resource = `resource == RocketAdmin::Dashboard::"${connectionId}/${item.dashboardId}"`;
+			}
 		} else if (item.action.startsWith('group:')) {
 			resource = `resource == RocketAdmin::Group::"${groupId}"`;
 		} else {