Is the dashboard usable on open-source self-hosted (local_deploy)? Getting "Access Restricted" after login

[PeterObeden]

Hi!

Trying to use the open-source self-hosted dashboard, and I'm not sure if I'm missing a config step. After signing up and logging in, the dashboard shows "Access Restricted / Contact Sales" instead of the API Inventory. Wanted to ask whether the dashboard is meant to be fully usable on local_deploy, and if so, what I'm missing.

Setup

• Images: aktosecurity/akto-api-security-dashboard:2.8.5_local,
  aktosecurity/akto-api-testing:2.8.5_local,
  mongo:6.0.28
• DASHBOARD_MODE=local_deploy (IS_SAAS unset), Docker Compose, single host

What happens

• Admin signs up at /signup, logs in fine, routes to /dashboard/... → then "Access Restricted".

What I found while poking around (could easily be misreading it)

• The SPA gate in main/index.js grants access when window.PLAN_TYPE ∈ {enterprise, professional, trial}.
• On a fresh local_deploy login, window.PLAN_TYPE === "" while `window.DASHBOARD_MODE === "LOCAL_DEPLOY", and the gate doesn't seem to look at DASHBOARD_MODE.
• PLAN_TYPE looks like it resolves via the billing service (ProfileAction → OrganizationUtils.fetchFromBillingService), which a self-hosted box doesn't have — so it comes back empty.

Questions

1. Is the dashboard intended to work on open-source local_deploy?
2. If so, is there a supported env/config to set the plan (so the gate passes), or anything I've skipped in the self-hosted setup?
3. If not expected, happy to file a proper issue with full repro.

Thanks for any pointers! 🙏

[sarthaknimbalkar]

Hit this exact thing on a fresh self-hosted 2.19.0_local and your diagnosis is correct - nice write-up.

Confirming the root cause: the SPA gate in apps/main/index.js only grants access when window.PLAN_TYPE ∈ {enterprise, professional, trial}. PLAN_TYPE is injected from pages/login.jsp (${requestScope.planType}) and resolves via the billing service, which a local_deploy box doesn't have - so it comes back "" and you get blocked, even though window.DASHBOARD_MODE === "LOCAL_DEPLOY". The gate never looks at DASHBOARD_MODE/IS_SAAS.

Proper fix: I opened #6112 to make the gate treat local_deploy / non-SaaS deployments as never-paywalled (added to the same bypass as whitelisted orgs / signup pages). That routes OSS logins straight to the dashboard.

Workarounds until it merges (either one):

1. No rebuild - set a valid plan on your org in Mongo, then restart the dashboard so it re-reads it:

   // mongosh
   db.getSiblingDB("billing").organizations.updateOne(
     { adminEmail: "<your-admin-email>" },
     { $set: { planType: "enterprise" } }
   )

   (Depending on your build the backend may still serve PLAN_TYPE empty; if so use Develop #2.)

2. Frontend - in pages/login.jsp, change window.PLAN_TYPE = '${requestScope.planType}' to window.PLAN_TYPE = 'enterprise' (or apply the Fix "Access Restricted" gate blocking open-source local_deploy dashboards #6112 gate change), and redeploy the WAR.

To answer your Q1 directly: yes, the OSS dashboard is meant to be fully usable on local_deploy - this is just a gate that forgot to account for it.