Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

User does not have permission error shows up due to relationship column being set to read only on a view. #15606

Open
1 task done
ConorWebb96 opened this issue Feb 24, 2025 · 3 comments
Assignees
Labels
backend Involves some work on the backend bb-data-ui bug Something isn't working env - production Bug found in production firestorm Data/Infra/Revenue Team views

Comments

@ConorWebb96
Copy link
Contributor

ConorWebb96 commented Feb 24, 2025

Checklist

  • I have searched budibase discussions and github issues to check if my issue already exists

Hosting

  • Self
    • Method: docker compose
    • Budibase Version: 3.4.16
    • App Version: 3.4.16

Describe the bug
A relationship field set to read-only (via column restriction on the view) causes an error: "User does not have permission." When viewing with a custom role, a 403 error in the network tab occurs when a user with that role accesses the screen.

To Reproduce
Steps to reproduce the behavior:

  1. Import the attached app
  2. Preview the app as a manager
  3. See the error being thrown

Expected behavior
If Role X has read access to View/Table Y, which includes a relationship column (at least readable) linking to Table Z, then X must be able to fetch Z's schema.

No error should be thrown whenever viewing the forms attached to the view. The form field is read-only, but a value should be shown if you use a read/edit form block.

Screenshots
View as a manager
Image

The form that causes the error: You can see the relationship is blank on an update type.
Image

Network error being thrown
Image
Image
Image

App Export
relationship-view-issue-1740394533671.tar.gz

@ConorWebb96 ConorWebb96 added backend Involves some work on the backend bb-data-ui bug Something isn't working env - production Bug found in production firestorm Data/Infra/Revenue Team views labels Feb 24, 2025
@aptkingston
Copy link
Member

As discussed privately, this is either a bug with the relationship picker field hitting an API endpoint it shouldn't, or a backend issue where tables related to each other should be able to fetch each other's schema regardless of access.

I'm rewriting the entire relationship picker field because it's awful, so I'll soon see where the core problem lies.

@adrinr adrinr self-assigned this Mar 3, 2025
@linear linear bot closed this as not planned Won't fix, can't repro, duplicate, stale Mar 11, 2025
@mike12345567
Copy link
Collaborator

Discussed on Linear - this is actually due to the related tables permission level and is not something that can easily be fixed (a larger piece of work is required).

@adrinr adrinr reopened this Mar 11, 2025
@adrinr adrinr closed this as not planned Won't fix, can't repro, duplicate, stale Mar 11, 2025
@adrinr adrinr reopened this Mar 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backend Involves some work on the backend bb-data-ui bug Something isn't working env - production Bug found in production firestorm Data/Infra/Revenue Team views
Projects
None yet
Development

No branches or pull requests

4 participants