appsmithorg / appsmith

Platform to build admin panels, internal tools, and dashboards. Integrates with 25+ databases and any API.
https://www.appsmith.com
Apache License 2.0
32.52k stars 3.53k forks source link

[Bug]: Incorrect info shown to user on user having execute but not having view permissions on datasources #34493

Open btsgh opened 3 weeks ago

btsgh commented 3 weeks ago

Is there an existing issue for this?

Description

When user is only given execute and not given view rights to datasources, on logging in as that user, the Data CTA comes with the yellow exclamation 'create a datasource to write your first query', and asking user to connect to a datasource to write the first query. This is incorrect and misleading, as the user does not have access to create new datasources, but he has permissions to run queries on existing datasources

Steps To Reproduce

  1. Create an application with few datasources and associated queries in the enterprise edition of appsmith
  2. In the Roles section of admin settings, for the above app, give all the application resources permission for all pages
  3. In the datasources and env tab, give only execute permissions on a datasource, and give Production environment access.
  4. Add this role to a group and add a user to that group.
  5. Login with this user and open the application.
  6. Note that the Data CTA comes with the yellow exclamation 'create a datasource to write your first query', and asking user to connect to a datasource to write the first query.
  7. Also on clicking the Data CTA, the right panel comes up with Invalid URL text

https://github.com/appsmithorg/appsmith/assets/101863839/3da7b1ea-96eb-4ab7-81d8-c81a17f93c71

Public Sample App

No response

Environment

Production

Severity

Medium (Frustrating UX)

Issue video log

No response

Version

Cloud

rohan-arthur commented 3 weeks ago

known limitation