We have published shared Questions and Dashboards. As soon as we use this URL in a iframe all the permission checks on Metabase are gone. Is there a possibilty to get this running with permission check on Metabase?
It's by design - a security thing. You can recompile and remove, but not recommended: