bizimarda opened a new issue #17152:
URL: https://github.com/apache/superset/issues/17152


   Hello,
   
   I noticed the authorization problem in user roles. When I logged in alpha 
roles user, SQL Lab menu disappears but if I try to reach to SQL Lab with url, 
it allows me to.  
   
   1. Go to register with alpha role
   2. Login with new alpha role user
   3. Look up nav/tab bar and see that SQL Lab button is hidden.
   4. Try to reach with this url : ./superset/sqllab/
   
   ### Expected results
   
   I expected that if the sql lab button is hidden, SQL lab menu can not be 
reachable. 
   
   ### Actual results
   
   Role permission is available for sqllab domains but  button is hidden.
   
   #### Screenshots
   
   
![image](https://user-images.githubusercontent.com/32847220/137891049-807f7b9f-68bb-456c-948f-9e9c96354360.png)
   
   
![image](https://user-images.githubusercontent.com/32847220/137891282-2131ad91-f69e-4189-89ef-e39ebeb16b86.png)
   
   
![image](https://user-images.githubusercontent.com/32847220/137891365-d443bc48-fd62-4640-8a55-bda80eca54ca.png)
   
   
   ### Environment
   
   latest
   
   
   ### Checklist
   
   Make sure to follow these steps before submitting your issue - thank you!
   
   - [ +] I have checked the superset logs for python stacktraces and included 
it here as text if there are any.
   - [ +] I have reproduced the issue with at least the latest released version 
of superset.
   - [+ ] I have checked the issue tracker for the same issue and I haven't 
found one similar.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to