Language pack issue in Embedded dashboards

[Rattlyy]

Bug description

Embedded dashboards won't load the /language_pack/{iso code} endpoint because it's authenticated and they aren't logged in.

Proposed solution:

superset/superset/views/core.py

Line 905 in d618837

@has_access

Remove the @has_access from the endpoint or fetch language pack after guest token initialization.

Screenshots/recordings

No response

Superset version

6.0.0

Python version

3.9

Node version

16

Browser

Chrome

Additional context

No response

Checklist

• I have searched Superset docs and Slack and didn't find a solution to my problem.
• I have searched the GitHub issue tracker and didn't find a similar bug report.
• I have checked Superset's logs for errors and if I found a relevant Python stacktrace, I included it here as text in the "additional context" section.

[dosubot]

This is a known area of difficulty. There are a couple of workarounds available:

Option 1: Grant the permission to the Public role

Since guest users in embedded dashboards are assigned the "Public" role, you can grant the "can language pack Superset" permission to the Public role so the endpoint is accessible without full authentication [1].

Option 2: Inject language packs via bootstrap data

Use COMMON_BOOTSTRAP_OVERRIDES_FUNC in your superset_config.py to bypass the endpoint entirely:

from superset.translations.utils import get_language_pack

def override_bootstrap_locale(data):
    if data.get("locale") == "it":  # or your target locale
        data["language_pack"] = get_language_pack("it")
    return data

COMMON_BOOTSTRAP_OVERRIDES_FUNC = override_bootstrap_locale

This injects the language pack directly into the bootstrap payload, avoiding the authenticated endpoint fetch altogether [1].

Relevant fix: PR #36893

PR #36893 (merged in February 2026) refactored language pack loading to happen before React renders via initPreamble(). If you're on version 6.0.0, upgrading to a more recent build that includes this fix may help with the timing aspect of the issue, though the authentication requirement on the endpoint may still need one of the workarounds above.

To reply, just mention @dosu.

---

Docs are dead. Just use Dosu.

[Cloud-Architect-Emma]

Hi @Rattlyy, thanks for raising this.

I’d like to help fix this issue. Could it be assigned to me?