Superset's `AUTH_ROLES_SYNC_AT_LOGIN = True` makes it impossible to use role-based access controls

[regisb]

Whenever an admin modifies the roles assigned to a user, the following warning pops up:

This means that it's basically not possible to customize the permissions associated to a user.

Instead, we could/should do the following:

• set AUTH_ROLES_SYNC_AT_LOGIN = False
• keep the _oauth_calculate_user_roles method, which will be called only at user creation by Base.SecurityManager.auth_user_oauth.

[regisb]

Did you check that this new feature actually works, and that we don't need to change the _oauth_calculate_user_roles function?

[FahadKhalid210]

@regisb yes, it works without changing _oauth_calculate_user_roles function.