BenikamSrikar commented on issue #41209: URL: https://github.com/apache/superset/issues/41209#issuecomment-4748081259
Hi @eubyte, thanks for the detailed repro steps. @dosu's explanation around AUTH_ROLES_SYNC_AT_LOGIN makes sense as a likely cause — if that's defaulting to True in your setup, LDAP would re-sync and overwrite manually assigned roles on every login, which would explain the behavior you're seeing. A couple of questions to help narrow this down: Does setting AUTH_ROLES_SYNC_AT_LOGIN = False in your superset_config.py resolve it on your end? Even with that explanation, the part where gamma_user loses access to all datasets/dashboards seems more severe than just a stale custom role — is that also tied to the role sync wiping out the base Gamma role too, or is something else going on there? If this turns out to be expected behavior given the config default, it might be more of a docs/clarity issue (e.g. warning users clearly that manual role assignments won't persist if sync-at-login is on). But if there's a deeper issue, like roles not merging correctly or the "no access at all" symptom not being explained by this alone, I'd be happy to dig into it once a committer confirms it's worth treating as a bug. Just flagging interest in helping out either way. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
