arize-phoenix 12.4.0__py3-none-any.whl → 12.6.0__py3-none-any.whl

phoenix/server/api/input_types/ExperimentRunSort.py

@@ -0,0 +1,237 @@
+import operator
+from enum import Enum, auto
+from typing import Any, Optional
+
+import strawberry
+from sqlalchemy import ColumnElement, Select, and_, func, literal, or_, select, tuple_
+from sqlalchemy.sql.selectable import NamedFromClause
+from strawberry import Maybe
+from typing_extensions import assert_never
+
+from phoenix.db import models
+from phoenix.server.api.types.pagination import (
+    Cursor,
+    CursorSortColumn,
+    CursorSortColumnDataType,
+    CursorSortColumnValue,
+)
+from phoenix.server.api.types.SortDir import SortDir
+
+
+@strawberry.enum
+class ExperimentRunMetric(Enum):
+    latencyMs = auto()
+
+
+@strawberry.input(one_of=True)
+class ExperimentRunColumn:
+    metric: Maybe[ExperimentRunMetric]
+    annotation_name: Maybe[str]
+
+
+@strawberry.input(description="The sort key and direction for experiment run connections")
+class ExperimentRunSort:
+    col: ExperimentRunColumn
+    dir: SortDir
+
+
+def get_experiment_run_cursor(
+    run: models.ExperimentRun, annotation_score: Optional[float], sort: Optional[ExperimentRunSort]
+) -> Cursor:
+    sort_column: Optional[CursorSortColumn] = None
+    if sort:
+        if sort.col.metric:
+            metric = sort.col.metric.value
+            assert metric is not None
+            if metric is ExperimentRunMetric.latencyMs:
+                sort_column = CursorSortColumn(
+                    type=CursorSortColumnDataType.FLOAT,
+                    value=run.latency_ms,
+                )
+            else:
+                assert_never(metric)
+        elif sort.col.annotation_name:
+            data_type = (
+                CursorSortColumnDataType.FLOAT
+                if annotation_score is not None
+                else CursorSortColumnDataType.NULL
+            )
+            sort_column = CursorSortColumn(
+                type=data_type,
+                value=annotation_score,
+            )
+    return Cursor(rowid=run.id, sort_column=sort_column)
+
+
+def add_order_by_and_page_start_to_query(
+    query: Select[Any],
+    sort: Optional[ExperimentRunSort],
+    experiment_rowid: int,
+    after_experiment_run_rowid: Optional[int],
+    after_sort_column_value: Optional[CursorSortColumnValue] = None,
+) -> Select[Any]:
+    mean_annotation_scores: Optional[NamedFromClause] = None
+    if sort and sort.col.annotation_name:
+        annotation_name = sort.col.annotation_name.value
+        assert annotation_name is not None
+        mean_annotation_scores = _get_mean_annotation_scores_subquery(annotation_name)
+    order_by_columns = _get_order_by_columns(
+        sort=sort, experiment_rowid=experiment_rowid, mean_annotation_scores=mean_annotation_scores
+    )
+    query = query.order_by(*order_by_columns)
+    if after_experiment_run_rowid is not None:
+        query = _add_after_expression(
+            query=query,
+            sort=sort,
+            experiment_run_rowid=after_experiment_run_rowid,
+            after_sort_column_value=after_sort_column_value,
+            mean_annotation_scores=mean_annotation_scores,
+        )
+    query = _add_joins_and_selects_to_query(
+        query=query,
+        sort=sort,
+        mean_annotation_scores=mean_annotation_scores,
+    )
+    return query
+
+
+def _get_order_by_columns(
+    sort: Optional[ExperimentRunSort],
+    experiment_rowid: int,
+    mean_annotation_scores: Optional[NamedFromClause],
+) -> tuple[ColumnElement[Any], ...]:
+    if not sort:
+        # Ideally, this would sort the runs by (example_id, repetition_number),
+        # but this would require making the cursor more complex or adding an additional query
+        # to handle the after cursor.
+        return (models.ExperimentRun.id.asc(),)
+    sort_direction = sort.dir
+    if sort.col.metric:
+        metric = sort.col.metric.value
+        assert metric is not None
+        if metric is ExperimentRunMetric.latencyMs:
+            if sort_direction is SortDir.asc:
+                return (models.ExperimentRun.latency_ms.asc(), models.ExperimentRun.id.asc())
+            else:
+                return (models.ExperimentRun.latency_ms.desc(), models.ExperimentRun.id.desc())
+        else:
+            assert_never(metric)
+    elif sort.col.annotation_name:
+        annotation_name = sort.col.annotation_name.value
+        assert annotation_name is not None
+        assert mean_annotation_scores is not None
+        if sort_direction is SortDir.asc:
+            return (
+                mean_annotation_scores.c.score.asc().nulls_last(),
+                models.ExperimentRun.id.asc(),
+            )
+        else:
+            return (
+                mean_annotation_scores.c.score.desc().nulls_last(),
+                models.ExperimentRun.id.desc(),
+            )
+    raise NotImplementedError
+
+
+def _add_after_expression(
+    query: Select[Any],
+    sort: Optional[ExperimentRunSort],
+    experiment_run_rowid: int,
+    after_sort_column_value: Optional[CursorSortColumnValue],
+    mean_annotation_scores: Optional[NamedFromClause],
+) -> Select[Any]:
+    if not sort:
+        # Ideally, this would return the runs sorted by (example_id, repetition_number),
+        # but this would require making the cursor more complex or adding an additional query.
+        return query.where(models.ExperimentRun.id > literal(experiment_run_rowid))
+    sort_direction = sort.dir
+    compare_fn = operator.gt if sort_direction is SortDir.asc else operator.lt
+    if sort.col.metric:
+        metric = sort.col.metric.value
+        assert metric is not None
+        if metric is ExperimentRunMetric.latencyMs:
+            assert after_sort_column_value is not None
+            return query.where(
+                compare_fn(
+                    tuple_(models.ExperimentRun.latency_ms, models.ExperimentRun.id),
+                    tuple_(
+                        literal(after_sort_column_value),
+                        literal(experiment_run_rowid),
+                    ),
+                )
+            )
+        else:
+            assert_never(metric)
+    elif sort.col.annotation_name:
+        annotation_name = sort.col.annotation_name.value
+        assert annotation_name is not None
+        assert mean_annotation_scores is not None
+        if after_sort_column_value is None:
+            return query.where(
+                and_(
+                    compare_fn(models.ExperimentRun.id, literal(experiment_run_rowid)),
+                    mean_annotation_scores.c.score.is_(None),
+                )
+            )
+        else:
+            return query.where(
+                or_(
+                    compare_fn(
+                        tuple_(mean_annotation_scores.c.score, models.ExperimentRun.id),
+                        tuple_(
+                            literal(after_sort_column_value),
+                            literal(experiment_run_rowid),
+                        ),
+                    ),
+                    mean_annotation_scores.c.score.is_(None),
+                )
+            )
+    raise NotImplementedError
+
+
+def _get_mean_annotation_scores_subquery(annotation_name: str) -> NamedFromClause:
+    return (
+        select(
+            func.avg(models.ExperimentRunAnnotation.score).label("score"),
+            models.ExperimentRunAnnotation.experiment_run_id.label("experiment_run_id"),
+        )
+        .select_from(models.ExperimentRunAnnotation)
+        .join(
+            models.ExperimentRun,
+            models.ExperimentRunAnnotation.experiment_run_id == models.ExperimentRun.id,
+        )
+        .where(models.ExperimentRunAnnotation.name == annotation_name)
+        .group_by(models.ExperimentRunAnnotation.experiment_run_id)
+        .subquery()
+        .alias("mean_annotation_scores")
+    )
+
+
+def _add_joins_and_selects_to_query(
+    query: Select[tuple[models.ExperimentRun]],
+    sort: Optional[ExperimentRunSort],
+    mean_annotation_scores: Optional[NamedFromClause],
+) -> Select[tuple[models.ExperimentRun]]:
+    if not sort:
+        return query
+    if sort.col.metric:
+        metric = sort.col.metric.value
+        assert metric is not None
+        if metric is ExperimentRunMetric.latencyMs:
+            return query
+        else:
+            assert_never(metric)
+    elif sort.col.annotation_name:
+        annotation_name = sort.col.annotation_name.value
+        assert annotation_name is not None
+        assert mean_annotation_scores is not None
+        query = query.join(
+            mean_annotation_scores,
+            mean_annotation_scores.c.experiment_run_id == models.ExperimentRun.id,
+            isouter=True,
+        )
+        query = query.add_columns(
+            mean_annotation_scores.c.score.label("score")
+        )  # the score must be in the select so that the value can be included in the cursor
+        return query
+    raise NotImplementedError

phoenix/server/api/input_types/ProjectSessionSort.py

@@ -1,8 +1,16 @@
+from dataclasses import dataclass
 from enum import Enum, auto
+from typing import Any, Optional
 
 import strawberry
+from sqlalchemy import and_, desc, func, nulls_last, select
+from sqlalchemy.orm import InstrumentedAttribute
+from sqlalchemy.sql.expression import Select
+from strawberry import UNSET
 from typing_extensions import assert_never
 
+from phoenix.db import models
+from phoenix.db.helpers import truncate_name
 from phoenix.server.api.types.pagination import CursorSortColumnDataType
 from phoenix.server.api.types.SortDir import SortDir
 
@@ -15,6 +23,29 @@ class ProjectSessionColumn(Enum):
     numTraces = auto()
     costTotal = auto()
 
+    @property
+    def column_name(self) -> str:
+        return truncate_name(f"{self.name}_project_session_sort_column")
+
+    def as_orm_expression(self, joined_table: Optional[Any] = None) -> Any:
+        expr: Any
+        if self is ProjectSessionColumn.startTime:
+            expr = models.ProjectSession.start_time
+        elif self is ProjectSessionColumn.endTime:
+            expr = models.ProjectSession.end_time
+        elif self is ProjectSessionColumn.tokenCountTotal:
+            assert joined_table is not None
+            expr = joined_table.c.key
+        elif self is ProjectSessionColumn.numTraces:
+            assert joined_table is not None
+            expr = joined_table.c.key
+        elif self is ProjectSessionColumn.costTotal:
+            assert joined_table is not None
+            expr = joined_table.c.key
+        else:
+            assert_never(self)
+        return expr.label(self.column_name)
+
     @property
     def data_type(self) -> CursorSortColumnDataType:
         if self is ProjectSessionColumn.tokenCountTotal or self is ProjectSessionColumn.numTraces:
@@ -25,8 +56,134 @@ class ProjectSessionColumn(Enum):
             return CursorSortColumnDataType.FLOAT
         assert_never(self)
 
+    def join_tables(self, stmt: Select[Any]) -> tuple[Select[Any], Any]:
+        """
+        If needed, joins tables required for the sort column.
+        """
+        if self is ProjectSessionColumn.tokenCountTotal:
+            sort_subq = (
+                select(
+                    models.Trace.project_session_rowid.label("id"),
+                    func.sum(models.Span.cumulative_llm_token_count_total).label("key"),
+                )
+                .join_from(models.Trace, models.Span)
+                .where(models.Span.parent_id.is_(None))
+                .group_by(models.Trace.project_session_rowid)
+            ).subquery()
+            stmt = stmt.join(sort_subq, models.ProjectSession.id == sort_subq.c.id)
+            return stmt, sort_subq
+        if self is ProjectSessionColumn.numTraces:
+            sort_subq = (
+                select(
+                    models.Trace.project_session_rowid.label("id"),
+                    func.count(models.Trace.id).label("key"),
+                ).group_by(models.Trace.project_session_rowid)
+            ).subquery()
+            stmt = stmt.join(sort_subq, models.ProjectSession.id == sort_subq.c.id)
+            return stmt, sort_subq
+        if self is ProjectSessionColumn.costTotal:
+            sort_subq = (
+                select(
+                    models.Trace.project_session_rowid.label("id"),
+                    func.sum(models.SpanCost.total_cost).label("key"),
+                )
+                .join_from(
+                    models.Trace,
+                    models.SpanCost,
+                    models.Trace.id == models.SpanCost.trace_rowid,
+                )
+                .group_by(models.Trace.project_session_rowid)
+            ).subquery()
+            stmt = stmt.join(sort_subq, models.ProjectSession.id == sort_subq.c.id)
+            return stmt, sort_subq
+        return stmt, None
+
+
+@strawberry.enum
+class ProjectSessionAnnoAttr(Enum):
+    score = "score"
+    label = "label"
+
+    @property
+    def column_name(self) -> str:
+        return f"{self.value}_anno_sort_column"
+
+    @property
+    def orm_expression(self) -> Any:
+        expr: InstrumentedAttribute[Any]
+        if self is ProjectSessionAnnoAttr.score:
+            expr = models.ProjectSessionAnnotation.score
+        elif self is ProjectSessionAnnoAttr.label:
+            expr = models.ProjectSessionAnnotation.label
+        else:
+            assert_never(self)
+        return expr.label(self.column_name)
+
+    @property
+    def data_type(self) -> CursorSortColumnDataType:
+        if self is ProjectSessionAnnoAttr.label:
+            return CursorSortColumnDataType.STRING
+        if self is ProjectSessionAnnoAttr.score:
+            return CursorSortColumnDataType.FLOAT
+        assert_never(self)
+
+
+@strawberry.input
+class ProjectSessionAnnoResultKey:
+    name: str
+    attr: ProjectSessionAnnoAttr
+
+
+@dataclass(frozen=True)
+class ProjectSessionSortConfig:
+    stmt: Select[Any]
+    orm_expression: Any
+    dir: SortDir
+    column_name: str
+    column_data_type: CursorSortColumnDataType
+
 
 @strawberry.input(description="The sort key and direction for ProjectSession connections.")
 class ProjectSessionSort:
-    col: ProjectSessionColumn
+    col: Optional[ProjectSessionColumn] = UNSET
+    anno_result_key: Optional[ProjectSessionAnnoResultKey] = UNSET
     dir: SortDir
+
+    def update_orm_expr(self, stmt: Select[Any]) -> ProjectSessionSortConfig:
+        if (col := self.col) and not self.anno_result_key:
+            stmt, joined_table = col.join_tables(stmt)
+            expr = col.as_orm_expression(joined_table)
+            stmt = stmt.add_columns(expr)
+            if self.dir == SortDir.desc:
+                expr = desc(expr)
+            return ProjectSessionSortConfig(
+                stmt=stmt.order_by(nulls_last(expr)),
+                orm_expression=col.as_orm_expression(joined_table),
+                dir=self.dir,
+                column_name=col.column_name,
+                column_data_type=col.data_type,
+            )
+        if (anno_result_key := self.anno_result_key) and not col:
+            anno_name = anno_result_key.name
+            anno_attr = anno_result_key.attr
+            expr = anno_result_key.attr.orm_expression
+            stmt = stmt.add_columns(expr)
+            if self.dir == SortDir.desc:
+                expr = desc(expr)
+            stmt = stmt.join(
+                models.ProjectSessionAnnotation,
+                onclause=and_(
+                    models.ProjectSessionAnnotation.project_session_id == models.ProjectSession.id,
+                    models.ProjectSessionAnnotation.name == anno_name,
+                ),
+            ).order_by(nulls_last(expr))
+            return ProjectSessionSortConfig(
+                stmt=stmt,
+                orm_expression=anno_result_key.attr.orm_expression,
+                dir=self.dir,
+                column_name=anno_attr.column_name,
+                column_data_type=anno_attr.data_type,
+            )
+        raise ValueError(
+            "Exactly one of `col` or `annoResultKey` must be specified on `ProjectSessionSort`."
+        )

phoenix/server/api/input_types/SpanSort.py

@@ -11,6 +11,7 @@ from typing_extensions import assert_never
 
 import phoenix.trace.v1 as pb
 from phoenix.db import models
+from phoenix.db.helpers import truncate_name
 from phoenix.server.api.types.pagination import CursorSortColumnDataType
 from phoenix.server.api.types.SortDir import SortDir
 from phoenix.trace.schemas import SpanID
@@ -32,7 +33,7 @@ class SpanColumn(Enum):
 
     @property
     def column_name(self) -> str:
-        return f"{self.name}_span_sort_column"
+        return truncate_name(f"{self.name}_span_sort_column")
 
     def as_orm_expression(self, joined_table: Optional[Any] = None) -> Any:
         expr: Any

phoenix/server/api/input_types/UserRoleInput.py

@@ -7,3 +7,4 @@ import strawberry
 class UserRoleInput(Enum):
     ADMIN = "ADMIN"
     MEMBER = "MEMBER"
+    VIEWER = "VIEWER"

phoenix/server/api/mutations/annotation_config_mutations.py

@@ -23,7 +23,7 @@ from phoenix.db.types.annotation_configs import (
 from phoenix.db.types.annotation_configs import (
     FreeformAnnotationConfig as FreeformAnnotationConfigModel,
 )
-from phoenix.server.api.auth import IsNotReadOnly
+from phoenix.server.api.auth import IsNotReadOnly, IsNotViewer
 from phoenix.server.api.context import Context
 from phoenix.server.api.exceptions import BadRequest, Conflict, NotFound
 from phoenix.server.api.queries import Query
@@ -197,7 +197,7 @@ def _to_pydantic_freeform_annotation_config(
 
 @strawberry.type
 class AnnotationConfigMutationMixin:
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def create_annotation_config(
         self,
         info: Info[Context, None],
@@ -236,7 +236,7 @@ class AnnotationConfigMutationMixin:
             annotation_config=to_gql_annotation_config(annotation_config),
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def update_annotation_config(
         self,
         info: Info[Context, None],
@@ -285,7 +285,7 @@ class AnnotationConfigMutationMixin:
             annotation_config=to_gql_annotation_config(annotation_config),
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def delete_annotation_configs(
         self,
         info: Info[Context, None],
@@ -317,7 +317,7 @@ class AnnotationConfigMutationMixin:
             ],
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def add_annotation_config_to_project(
         self,
         info: Info[Context, None],
@@ -377,7 +377,7 @@ class AnnotationConfigMutationMixin:
                 project=Project(project_rowid=project_id),
             )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def remove_annotation_config_from_project(
         self,
         info: Info[Context, None],

phoenix/server/api/mutations/api_key_mutations.py

@@ -1,5 +1,5 @@
 from datetime import datetime, timezone
-from typing import Optional
+from typing import Literal, Optional
 
 import strawberry
 from sqlalchemy import select
@@ -9,7 +9,7 @@ from strawberry.types import Info
 
 from phoenix.db import models
 from phoenix.db.models import UserRoleName
-from phoenix.server.api.auth import IsAdmin, IsLocked, IsNotReadOnly
+from phoenix.server.api.auth import IsAdmin, IsLocked, IsNotReadOnly, IsNotViewer
 from phoenix.server.api.context import Context
 from phoenix.server.api.exceptions import Unauthorized
 from phoenix.server.api.queries import Query
@@ -61,7 +61,7 @@ class DeleteApiKeyMutationPayload:
 
 @strawberry.type
 class ApiKeyMutationMixin:
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsAdmin, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsAdmin, IsLocked])  # type: ignore
     async def create_system_api_key(
         self, info: Info[Context, None], input: CreateApiKeyInput
     ) -> CreateSystemApiKeyMutationPayload:
@@ -113,12 +113,20 @@ class ApiKeyMutationMixin:
         except AttributeError:
             raise ValueError("User not found")
         issued_at = datetime.now(timezone.utc)
+        # Determine user role for API key
+        user_role: Literal["ADMIN", "MEMBER", "VIEWER"]
+        if user.is_admin:
+            user_role = "ADMIN"
+        elif user.is_viewer:
+            user_role = "VIEWER"
+        else:
+            user_role = "MEMBER"
         claims = ApiKeyClaims(
             subject=user.identity,
             issued_at=issued_at,
             expiration_time=input.expires_at or None,
             attributes=ApiKeyAttributes(
-                user_role="ADMIN" if user.is_admin else "MEMBER",
+                user_role=user_role,
                 name=input.name,
                 description=input.description,
             ),
@@ -137,7 +145,7 @@ class ApiKeyMutationMixin:
             query=Query(),
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsAdmin])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsAdmin])  # type: ignore
     async def delete_system_api_key(
         self, info: Info[Context, None], input: DeleteApiKeyInput
     ) -> DeleteApiKeyMutationPayload:

phoenix/server/api/mutations/chat_mutations.py

@@ -30,7 +30,7 @@ from phoenix.db.helpers import (
     get_dataset_example_revisions,
     insert_experiment_with_examples_snapshot,
 )
-from phoenix.server.api.auth import IsLocked, IsNotReadOnly
+from phoenix.server.api.auth import IsLocked, IsNotReadOnly, IsNotViewer
 from phoenix.server.api.context import Context
 from phoenix.server.api.exceptions import BadRequest, CustomGraphQLError, NotFound
 from phoenix.server.api.helpers.dataset_helpers import get_dataset_example_output
@@ -131,7 +131,7 @@ class ChatCompletionOverDatasetMutationPayload:
 
 @strawberry.type
 class ChatCompletionMutationMixin:
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     @classmethod
     async def chat_completion_over_dataset(
         cls,
@@ -302,7 +302,7 @@ class ChatCompletionMutationMixin:
             payload.examples.append(example_payload)
         return payload
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     @classmethod
     async def chat_completion(
         cls, info: Info[Context, None], input: ChatCompletionInput

phoenix/server/api/mutations/dataset_label_mutations.py

@@ -10,7 +10,7 @@ from strawberry.relay.types import GlobalID
 from strawberry.types import Info
 
 from phoenix.db import models
-from phoenix.server.api.auth import IsLocked, IsNotReadOnly
+from phoenix.server.api.auth import IsLocked, IsNotReadOnly, IsNotViewer
 from phoenix.server.api.context import Context
 from phoenix.server.api.exceptions import BadRequest, Conflict, NotFound
 from phoenix.server.api.queries import Query
@@ -78,7 +78,7 @@ class UnsetDatasetLabelsMutationPayload:
 
 @strawberry.type
 class DatasetLabelMutationMixin:
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def create_dataset_label(
         self,
         info: Info[Context, None],
@@ -100,7 +100,7 @@ class DatasetLabelMutationMixin:
             dataset_label=to_gql_dataset_label(dataset_label_orm)
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def update_dataset_label(
         self, info: Info[Context, None], input: UpdateDatasetLabelInput
     ) -> UpdateDatasetLabelMutationPayload:
@@ -133,7 +133,7 @@ class DatasetLabelMutationMixin:
             dataset_label=to_gql_dataset_label(dataset_label_orm)
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def delete_dataset_labels(
         self, info: Info[Context, None], input: DeleteDatasetLabelsInput
     ) -> DeleteDatasetLabelsMutationPayload:
@@ -166,7 +166,7 @@ class DatasetLabelMutationMixin:
             ]
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def set_dataset_labels(
         self, info: Info[Context, None], input: SetDatasetLabelsInput
     ) -> SetDatasetLabelsMutationPayload:
@@ -248,7 +248,7 @@ class DatasetLabelMutationMixin:
             query=Query(),
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsLocked])  # type: ignore
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer, IsLocked])  # type: ignore
     async def unset_dataset_labels(
         self, info: Info[Context, None], input: UnsetDatasetLabelsInput
     ) -> UnsetDatasetLabelsMutationPayload: