Access Policies Viewer

Access Policies Viewer

The new Access Policies viewer surfaces every access policy defined in your data model — row-level filters, member-level restrictions, and member masking — broken down by the user groups they apply to. Audit who can see which cubes and views, and how each policy is composed, without grepping through cube files or running test queries.

Open it from the Model module by clicking Access Policies in the sub-sidebar. The viewer reflects whichever branch and build you are currently on, so policies you are editing in development mode appear alongside what is live in production.

New Dark Theme

We've rebuilt our dark theme from the ground up to improve its look and feel — with refined contrast, more readable typography, and polished surface styling across every Cube surface. Switch between light and dark themes from Preferences.

Other improvements and fixes:

Workbooks

• Added a query info badge that surfaces cache and pre-aggregation status for the current chart and links to Query History
• All charts now use a transparent background by default for better theme integration

Dashboards

• Published Dashboards now render charts immediately on first load instead of waiting for filter dropdown suggestions
• Dashboards now gracefully handle missing members in widgets instead of showing an error

Administration

• Added a Configuration Settings tab in Deployment Settings to manage default time zone, row limits, and query timeout
• Chat History admin page now supports filtering by user, agent, and creation date range
• Sensitive agent environment variables are now masked in admin responses

AI

• Certifying a query from chat now opens a dialog to add it as a certified query file in your data model repository, on a new dev branch
• Conversations started from MCP clients like Claude Desktop and Cursor now appear in your Cube chat list
• The AI agent now asks for confirmation before converting model files between languages
• The AI agent no longer asks for a branch name when entering dev mode

Embed

• The generate-session API now accepts a userProfile payload to set display name and avatar for external users
• Embedded dashboards now use dynamic viewport units so they fill the available height correctly on mobile browsers
• Dashboard preview in Creator Mode now stretches to the full viewport height

Integrations

You can now duplicate an exploration with Save as in the Google Sheets and Excel add-ons.

Modeling

• The branch switcher is now available in the IDE toolbar when viewing production, so you can switch or create branches without first toggling dev mode
• Dev Mode now explains why it is unavailable when it can't be entered