search

appsmithorg / appsmith

Platform to build admin panels, internal tools, and dashboards. Integrates with 25+ databases and any API.
https://www.appsmith.com
Apache License 2.0
34.35k stars 3.72k forks source link

[Bug]: User gets logged out with no environment access, but having edit and view access on app resources #31559

Open btsgh opened 8 months ago

btsgh commented 8 months ago

Is there an existing issue for this?

Description

On giving Edit and View access to application resources, and Execute to DS, but no access to environments, when we login with user with above roles, and click queries, user gets logged out

Steps To Reproduce

  1. Create an application and generate a crud page, so that the app has a DS, a few queries, and a few pages.
  2. Create a role with Edit and View access given to all the application resources of the above app
  3. Give execute access to the datasource, but no environment access
  4. Create a group, add a user to the group and assign this role to the group
  5. Login with the above user.
  6. Edit the application. Click on the Queries tab on the left pane.
  7. Note that the user gets logged out at this point

User should not get logged out.

https://github.com/appsmithorg/appsmith/assets/101863839/737e7514-e7c9-497d-b787-ba5c6af06359

Public Sample App

No response

Environment

Production

Severity

High (Blocker to building)

Issue video log

No response

Version

Cloud

riteshkew commented 6 months ago

Need to pick this up and correct the flow