Skip to content

[Bug]: Settings tab is visible though user does not have access to it. #28249

Closed
@btsgh

Description

Is there an existing issue for this?

  • I have searched the existing issues

Description

A user without Edit access to Others Resource permissions on a workspace, is still able to see the Settings tab. Once he clicks on it, he gets thrown out of the page to the home page.

Steps To Reproduce

  1. Create an app from the admin user.
  2. Create a role - Role1. Give it all permissions on an application for the App Resources, DS environments tab.
  3. In the Others tab, give only Delete permission for the app
  4. Now create a group - Grp1, Add a user to this group, User1 [in this case - me-qa2@appsmith.com], and assign the above role to the group
  5. Login with that user
  6. Click on the kebab menu next to New button
  7. Click on Environments here
  8. Note that the General Settings tab is also visible.

Only the environments tab should be visible. General Settings should not visible or accessible.

Screen.Recording.2023-10-20.at.11.20.42.AM.mov

Public Sample App

No response

Environment

Deploy Preview

Issue video log

No response

Version

Cloud

Metadata

Assignees

Labels

BugSomething isn't workingCriticalThis issue needs immediate attention. Drop everything elseDeploy PreviewIssues found in Deploy PreviewEnvironments ProductIssues related to datasource environmentsGit PlatformIssues related to the git & the app platformQANeeds QA attentionQuery & JS PodIssues related to the query & JS PodStale

Type

No type

Projects

  • Status

    Closed

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions