Issue Summary

Dashcards Power-Up shows cards from private boards to users who aren't members of those boards. The Dashcard front only shows a count, for example overdue tasks. But when a non-member opens the Dashcard and selects Explore, the results table lists the matching cards from private boards. It shows the card name, list name, labels and any other columns that are set up in the Dashcard.

Mirror cards behave differently. When a user doesn't have access to the source board, a mirror card shows "You don't have access to this card" and hides the details. The Dashcard results table doesn't apply the same restriction.

Steps to Reproduce

1. Create a private board (Board A) with a few cards, for example cards with certain labels and members.
2. Create a dashboard board (Board B), enable the Dashcards Power-Up and add a Dashcard with a filter that matches cards on Board A, for example "Overdue label".
3. Add User X to Board B only. User X is a board guest and isn't a workspace member or admin of Board A or B.
4. Log in as User X and open Board B. The Dashcard count includes the Board A cards.
5. Open the Dashcard and select Explore. Result: The Board A cards are listed with their card name, list name, labels and the other columns that are set up.
6. For comparison, mirror a Board A card onto Board B. As User X, the mirror card shows "You don't have access to this card".

Expected Results

Dashcard cards and results should only include cards from boards the viewer can access, which matches the mirror card permission check, which the total count should be visible for all board members.

Actual Results

It shows the card name, list name, labels and any other columns that are set up in the Dashcard to non board members

Workaround

NA.Currently there is no known workaround for this behavior. A workaround will be added here when available