First, please accept our apologies, the feature is currently not working as intended. Dashboards that are not shared should not be visible in the UI or accessible via API. It appears this behavior was unintentionally introduced in one of our recent releases, and we appreciate you bringing it to our attention.
We understand that being able to view the titles of private dashboards is not ideal, as it may give users unintended insight into their content. However, it's important to note that dashboard sharing permissions are not designed as a security feature. To ensure robust and secure data access management, we strongly recommend implementing either Workspace Data Filters (WDF) or User Data Filters (UDF). These features offer robust control over what data users can view, regardless of dashboard visibility. For more details, please feel free to check the documentation below:
https://www.gooddata.com/docs/cloud/workspaces/workspace-data-filters/
https://www.gooddata.com/docs/cloud/workspaces/user-data-filters/
For reference, a similar issue was previously discussed in this
community thread, which might offer additional context. While the specifics may differ, it serves as a useful example of potential pitfalls and how they were addressed. I recommend reviewing it to help avoid similar challenges.
With this said, the issue has been reported internally, and our engineering team has already developed a fix. It is scheduled for release on Monday at approximately 10:00 AM CEST. Should the timeline change, we will notify you accordingly.