bug(security): removed View Analytics from all users and blocked acce…

[benjiaming]

Summary: security fix to block exposed urls

Addresses:

• all users can enter the /analytics through the url #14417
• Unauthorized users can access restricted UI pages and view data via direct URL access #13687

Note:

• The documentation about access to /analytics in https://docs.datahub.com/docs/authorization/roles was wrong, updated
• Any unauthorized link under /settings redirects to the default route (/settings/preferences)

[alwaysmeticulous]

✅ Meticulous spotted visual differences in 72 of 1479 screens tested, but all differences have already been approved: view differences detected.

Meticulous evaluated ~8 hours of user flows against your PR.

_{Last updated for commit 5a781ca. This comment will update as new commits are pushed.}

[codecov]

Bundle Report

Changes will increase total bundle size by 1.78kB (0.01%) ⬆️. This is within the configured threshold ✅

Detailed changes

Bundle name	Size	Change
datahub-react-web-esm	28.48MB	1.78kB (0.01%) ⬆️

Affected Assets, Files, and Routes:

view changes for bundle: datahub-react-web-esm

Assets Changed:

Asset Name	Size Change	Total Size	Change (%)
assets/index-*.js	1.78kB	18.83MB	0.01%

Files in assets/index-*.js:

• ./src/app/settingsV2/SettingsPage.tsx → Total Size: 8.14kB

• ./src/app/settingsV2/settingsPaths.tsx → Total Size: 3.0kB

• ./src/app/SearchRoutes.tsx → Total Size: 5.28kB

• ./src/app/shared/NoPageFound.tsx → Total Size: 1.75kB

• ./src/app/settings/SettingsPage.tsx → Total Size: 8.6kB

[codecov]

❌ 11 Tests Failed:

Tests completed	Failed	Passed	Skipped
156	11	145	0

View the top 3 failed test(s) by shortest run time

manage ownership cypress/e2e/ownership/manage_ownership.js::cypress/e2e/ownership/manage_ownership.js

Stack Traces | 11.4s run time

2025-08-16T03:32:41.097Z
Timed out retrying after 10000ms: Expected to find content: 'Manage Ownership' but never did.

manage ownership cypress/e2e/ownershipV2/v2_manage_ownership.js::cypress/e2e/ownershipV2/v2_manage_ownership.js

Stack Traces | 11.5s run time

2025-08-16T03:29:22.903Z
Timed out retrying after 10000ms: Expected to find content: 'Manage Ownership' but never did.

add_user cypress/e2e/mutations/add_users.js::cypress/e2e/mutations/add_users.js

Stack Traces | 11.7s run time

2025-08-16T03:31:28.108Z
Timed out retrying after 10000ms: Expected to find content: 'Invite Users' but never did.

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}