GitHub user paulsonkevgit created a discussion: Access Denied toasts displaying 
Randomly for Custom "readonly" role

### Bug description

We've created a custom role in Superset called "readonly" with assigned 
permissions to allow view-only access. But the users assigned this role 
frequently encounter "Access Denied" toaster notifications while navigating 
through the Superset UI — even when performing actions that should be permitted.

Allowed Permissions (for readonly Role): 

[can list on SavedQuery, can read on SavedQuery, can read on CssTemplate, can 
read on ReportSchedule, can read on Chart, can read on Annotation, can read on 
Dataset, can recent activity on Log, can read on Log, can drill on Dashboard, 
can read on Dashboard, can read on Database, can read on Query, can show on 
MyUserOAuthModelView, can userinfo on MyUserOAuthModelView, can list on 
MyUserOAuthModelView, can show on RoleModelView, can list on RoleModelView, can 
show on RegisterUserModelView, can list on RegisterUserModelView, can get on 
OpenApi, can show on SwaggerView, can get on MenuApi, can this form get on 
DashboardModelView1, can this form post on DashboardModelView1, can list on 
AsyncEventsRestApi, can read on AdvancedDataType, can read on AvailableDomains, 
can write on DashboardFilterStateRestApi, can read on 
DashboardFilterStateRestApi, can read on DashboardPermalinkRestApi, can read on 
Explore, can read on ExploreFormDataRestApi, can read on 
ExplorePermalinkRestApi, menu access
  on Row Level Security, can read on Row Level Security, can read on Tag, can 
time range on Api, can dashboard on Superset, can explore json on Superset, 
menu access on Tags, can read on SecurityRestApi, can read on RowLevelSecurity, 
menu access on Security, menu access on List Users, menu access on List Roles, 
menu access on User Registrations, menu access on Action Log, menu access on 
Home, menu access on Data, menu access on Databases, menu access on Dashboards, 
menu access on Charts, menu access on Datasets, menu access on Manage, menu 
access on Plugins, menu access on CSS Templates, menu access on Alerts & 
Report, menu access on Annotation Layers].




### Screenshots/recordings

<img width="1236" height="370" alt="Image" 
src="https://github.com/user-attachments/assets/42e94f1c-a38e-4c9d-b0fa-60c33bba0618";
 />

### Superset version

4.1.3

### Python version

3.10

### Node version

18 or greater

### Browser

Chrome

### Additional context

_No response_

### Checklist

- [ ] I have searched Superset docs and Slack and didn't find a solution to my 
problem.
- [ ] I have searched the GitHub issue tracker and didn't find a similar bug 
report.
- [ ] I have checked Superset's logs for errors and if I found a relevant 
Python stacktrace, I included it here as text in the "additional context" 
section.

GitHub link: https://github.com/apache/superset/discussions/34779

----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: 
notifications-unsubscr...@superset.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org
For additional commands, e-mail: notifications-h...@superset.apache.org

Reply via email to