Charts in subscriptions can not be shown due to permission issue

Good afternoon,

After the upgrade to version 0.43.4, our users are not able to see the charts in the email from the subscription. In our log appear this:

[6b3c866e-13d2-4061-a91f-5e5a791e124e] 2022-09-19T17:50:58+02:00 ERROR metabase.query-processor.middleware.catch-exceptions Error processing query: You do not have permissions to run this query.
{:database_id 2,
 :started_at #t "2022-09-19T15:50:58.044171Z[UTC]",
 :error_type :missing-required-permissions,
 :json_query
 {:constraints {:max-results 10000, :max-results-bare-rows 2000},
  :type :native,
  :middleware
  {:js-int-to-string? false,
   :ignore-cached-results? false,
   :process-viz-settings? true,
   :add-default-userland-constraints? true},
  :native
  {:query
   "*"},
  :database 2,
  :parameters [],
  :async? false,
  :cache-ttl nil},
 :status :failed,
 :class clojure.lang.ExceptionInfo,
 :stacktrace
 ["--> query_processor.middleware.permissions$perms_exception.invokeStatic(permissions.clj:30)"
  "query_processor.middleware.permissions$perms_exception.doInvoke(permissions.clj:24)"
  "query_processor.middleware.permissions$perms_exception.invokeStatic(permissions.clj:27)"
  "query_processor.middleware.permissions$perms_exception.invoke(permissions.clj:24)"
  "query_processor.middleware.permissions$fn__47180$check_ad_hoc_query_perms__47185$fn__47186.invoke(permissions.clj:84)"
  "query_processor.middleware.permissions$fn__47180$check_ad_hoc_query_perms__47185.invoke(permissions.clj:80)"
  "query_processor.middleware.permissions$fn__47211$check_query_permissions_STAR___47216$fn__47217.invoke(permissions.clj:99)"
  "query_processor.middleware.permissions$fn__47211$check_query_permissions_STAR___47216.invoke(permissions.clj:89)"
  "query_processor.middleware.permissions$check_query_permissions$fn__47230.invoke(permissions.clj:108)"
  "query_processor.middleware.mbql_to_native$mbql__GT_native$fn__50388.invoke(mbql_to_native.clj:23)"
  "query_processor$fn__52921$combined_post_process__52926$combined_post_process_STAR___52927.invoke(query_processor.clj:207)"
  "query_processor$fn__52921$combined_pre_process__52922$combined_pre_process_STAR___52923.invoke(query_processor.clj:204)"
  "query_processor.middleware.resolve_database_and_driver$resolve_database_and_driver$fn__51368$fn__51373.invoke(resolve_database_and_driver.clj:35)"
  "driver$do_with_driver.invokeStatic(driver.clj:75)"
  "driver$do_with_driver.invoke(driver.clj:71)"
  "query_processor.middleware.resolve_database_and_driver$resolve_database_and_driver$fn__51368.invoke(resolve_database_and_driver.clj:34)"
  "query_processor.middleware.fetch_source_query$resolve_card_id_source_tables$fn__47473.invoke(fetch_source_query.clj:281)"
  "query_processor.middleware.store$initialize_store$fn__47661$fn__47662.invoke(store.clj:11)"
  "query_processor.store$do_with_store.invokeStatic(store.clj:44)"
  "query_processor.store$do_with_store.invoke(store.clj:38)"
  "query_processor.middleware.store$initialize_store$fn__47661.invoke(store.clj:10)"
  "query_processor.middleware.normalize_query$normalize$fn__51640.invoke(normalize_query.clj:22)"
  "query_processor.middleware.constraints$add_default_userland_constraints$fn__48730.invoke(constraints.clj:53)"
  "query_processor.middleware.process_userland_query$process_userland_query$fn__51579.invoke(process_userland_query.clj:145)"
  "query_processor.middleware.catch_exceptions$catch_exceptions$fn__51951.invoke(catch_exceptions.clj:168)"
  "query_processor.reducible$async_qp$qp_STAR___44200$thunk__44202.invoke(reducible.clj:100)"
  "query_processor.reducible$async_qp$qp_STAR___44200.invoke(reducible.clj:106)"
  "query_processor.reducible$async_qp$qp_STAR___44200.invoke(reducible.clj:91)"
  "query_processor.reducible$async_qp$qp_STAR___44200.invoke(reducible.clj:88)"
  "query_processor.reducible$sync_qp$qp_STAR___44211.doInvoke(reducible.clj:126)"
  "query_processor$process_userland_query.invokeStatic(query_processor.clj:326)"
  "query_processor$process_userland_query.doInvoke(query_processor.clj:322)"
  "query_processor$fn__52968$process_query_and_save_execution_BANG___52977$fn__52978.invoke(query_processor.clj:334)"
  "query_processor$fn__52968$process_query_and_save_execution_BANG___52977.invoke(query_processor.clj:330)"
  "query_processor$fn__53012$process_query_and_save_with_max_results_constraints_BANG___53021$fn__53022.invoke(query_processor.clj:346)"
  "query_processor$fn__53012$process_query_and_save_with_max_results_constraints_BANG___53021.invoke(query_processor.clj:342)"
  "pulse$execute_dashboard_subscription_card$fn__76290$fn__76291.invoke(pulse.clj:60)"
  "query_processor.card$run_query_for_card_async.invokeStatic(card.clj:211)"
  "query_processor.card$run_query_for_card_async.doInvoke(card.clj:169)"
  "query_processor.dashboard$run_query_for_dashcard_async.invokeStatic(dashboard.clj:173)"
  "query_processor.dashboard$run_query_for_dashcard_async.doInvoke(dashboard.clj:145)"
  "pulse$execute_dashboard_subscription_card$fn__76290.invoke(pulse.clj:50)"
  "server.middleware.session$do_with_current_user.invokeStatic(session.clj:270)"
  "server.middleware.session$do_with_current_user.invoke(session.clj:259)"
  "pulse$execute_dashboard_subscription_card.invokeStatic(pulse.clj:49)"
  "pulse$execute_dashboard_subscription_card.invoke(pulse.clj:44)"
  "pulse$execute_dashboard$iter__76302__76306$fn__76307.invoke(pulse.clj:85)"
  "pulse$fn__76437.invokeStatic(pulse.clj:288)"
  "pulse$fn__76437.invoke(pulse.clj:282)"
  "pulse$results__GT_notifications$iter__76467__76471$fn__76472.invoke(pulse.clj:345)"
  "pulse$send_notifications_BANG_.invokeStatic(pulse.clj:387)"
  "pulse$send_notifications_BANG_.invoke(pulse.clj:386)"
  "pulse$send_pulse_BANG_.invokeStatic(pulse.clj:415)"
  "pulse$send_pulse_BANG_.doInvoke(pulse.clj:395)"
  "api.pulse$fn__77624.invokeStatic(pulse.clj:241)"
  "api.pulse$fn__77624.invoke(pulse.clj:227)"
  "server.middleware.auth$enforce_authentication$fn__66770.invoke(auth.clj:14)"
  "api.routes$fn__78132$fn__78135.invoke(routes.clj:59)"
  "server.routes$fn__78282$fn__78283.doInvoke(routes.clj:67)"
  "server.routes$fn__78268$fn__78270.invoke(routes.clj:45)"
  "server.middleware.exceptions$catch_uncaught_exceptions$fn__75094.invoke(exceptions.clj:98)"
  "server.middleware.exceptions$catch_api_exceptions$fn__75091.invoke(exceptions.clj:86)"
  "server.middleware.log$log_api_call$fn__78752$fn__78753$fn__78754.invoke(log.clj:211)"
  "driver.sql_jdbc.execute.diagnostic$do_with_diagnostic_info.invokeStatic(diagnostic.clj:15)"
  "driver.sql_jdbc.execute.diagnostic$do_with_diagnostic_info.invoke(diagnostic.clj:9)"
  "server.middleware.log$log_api_call$fn__78752$fn__78753.invoke(log.clj:203)"
  "server.middleware.log$log_api_call$fn__78752.invoke(log.clj:202)"
  "server.middleware.browser_cookie$ensure_browser_id_cookie$fn__81988.invoke(browser_cookie.clj:38)"
  "server.middleware.security$add_security_headers$fn__60363.invoke(security.clj:148)"
  "server.middleware.json$wrap_json_body$fn__81127.invoke(json.clj:63)"
  "server.middleware.json$wrap_streamed_json_response$fn__81145.invoke(json.clj:99)"
  "server.middleware.offset_paging$handle_paging$fn__60387.invoke(offset_paging.clj:42)"
  "server.middleware.misc$maybe_set_site_url$fn__35185.invoke(misc.clj:59)"
  "server.middleware.session$bind_current_user$fn__46657$fn__46658.invoke(session.clj:291)"
  "server.middleware.session$do_with_current_user.invokeStatic(session.clj:270)"
  "server.middleware.session$do_with_current_user.invoke(session.clj:259)"
  "server.middleware.session$bind_current_user$fn__46657.invoke(session.clj:290)"
  "server.middleware.session$wrap_current_user_info$fn__46639.invoke(session.clj:240)"
  "server.middleware.session$wrap_session_id$fn__46623.invoke(session.clj:173)"
  "server.middleware.auth$wrap_api_key$fn__66778.invoke(auth.clj:27)"
  "server.middleware.misc$add_content_type$fn__35168.invoke(misc.clj:27)"
  "server.middleware.misc$disable_streaming_buffering$fn__35193.invoke(misc.clj:76)"
  "server.middleware.misc$bind_request$fn__35196.invoke(misc.clj:93)"
  "server.middleware.ssl$redirect_to_https_middleware$fn__82004.invoke(ssl.clj:48)"
  "server$async_proxy_handler$fn__78524.invoke(server.clj:73)"
  "server.proxy$org.eclipse.jetty.server.handler.AbstractHandler$ff19274a.handle(Unknown Source)"],
 :card_id 412,
 :context :pulse,
 :error "You do not have permissions to run this query.",
 :row_count 0,
 :running_time 0,
 :ex-data
 {:type :missing-required-permissions,
  :required-permissions #{"/db/2/native/"},
  :actual-permissions
  #{"/collection/120/"
    "/db/2/schema/xxxxxx/table/61/"
    "/collection/317/"
    "/collection/225/"
    "/collection/203/"
    "/collection/254/"
    "/download/db/5/"
    "/collection/114/"
    "/db/2/schema/xxxxxx/table/42/"
    "/db/2/schema/xxxxxx/table/143/"
    "/collection/249/"
    "/collection/314/"
    "/collection/355/"
    "/download/db/4/"
    "/collection/223/"
    "/db/2/schema/xxxxxx/table/145/"
    "/download/db/6/"
    "/collection/328/"
    "/download/db/2/native/"
    "/collection/173/"
    "/collection/146/"
    "/db/2/schema/xxxxxx/table/162/"
    "/db/2/schema/xxxxxx/table/13/"
    "/collection/201/"
    "/collection/128/"
    "/db/2/schema/xxxxxx/table/21/"
    "/db/2/schema//table/140/"
    "/collection/385/"
    "/db/2/schema/xxxxxx/table/51/"
    "/collection/346/"
    "/collection/433/"
    "/db/2/schema/xxxxxx/table/12/"
    "/db/2/schema/xxxxxx/table/37/"
    "/db/2/schema/xxxxxx/table/11/"
    "/collection/255/"
    "/collection/94/"
    "/collection/210/"
    "/collection/454/"
    "/download/db/3/"
    "/collection/117/"
    "/collection/106/"
    "/db/2/schema/xxxxxx/table/140/"
    "/download/db/7/native/"
    "/collection/133/"
    "/db/7/schema/"
    "/collection/290/"
    "/db/2/schema/xxxxxx/table/49/"
    "/collection/250/"
    "/db/2/schema/xxxxxx/table/62/"
    "/download/db/2/"
    "/collection/166/read/"
    "/collection/317/read/"
    "/db/2/schema/xxxxxx/table/8/"
    "/db/2/schema/xxxxxx/table/119/"
    "/collection/root/"
    "/collection/112/"
    "/download/db/9/"
    "/collection/200/"
    "/db/2/schema/xxxxxx/table/54/"
    "/collection/186/"
    "/collection/241/"
    "/collection/408/"
    "/collection/466/"
    "/db/2/schema/xxxxxx/table/146/"
    "/collection/167/"
    "/collection/287/"
    "/collection/362/"
    "/db/2/schema/xxxxxx/table/44/"
    "/db/2/schema/xxxxxx/table/144/"
    "/db/2/schema/xxxxxx/table/153/"
    "/collection/110/"
    "/collection/163/"
    "/db/2/schema/xxxxxx/table/60/"
    "/collection/204/"
    "/collection/371/"
    "/db/2/schema/xxxxxx/table/150/"
    "/db/2/schema/xxxxxx/table/22/"
    "/download/db/8/"
    "/collection/116/"
    "/db/2/schema/xxxxxx/table/45/"
    "/collection/211/"
    "/collection/256/"
    "/application/subscription/"
    "/db/2/schema/xxxxxx/table/141/"
    "/collection/118/"
    "/collection/232/"
    "/collection/115/"
    "/db/2/schema/xxxxxx/table/47/"
    "/collection/300/"
    "/db/2/schema/xxxxxx/table/23/"
    "/db/2/schema/xxxxxx/table/147/"
    "/collection/315/"
    "/collection/365/"
    "/collection/196/"
    "/collection/407/"
    "/collection/206/"
    "/db/2/schema/xxxxxx/table/43/"
    "/collection/113/"
    "/collection/264/"
    "/download/db/7/"
    "/db/2/schema/xxxxxx/table/10/"
    "/collection/363/"
    "/collection/202/"
    "/collection/229/"
    "/db/2/schema/xxxxxx/table/151/"
    "/db/2/schema/xxxxxx/table/55/"
    "/collection/209/"
    "/collection/246/"
    "/db/2/schema/xxxxxx/table/120/"
    "/collection/205/"
    "/collection/344/"
    "/collection/288/"
    "/db/2/schema/xxxxxx/table/152/"
    "/db/2/schema/xxxxxx/table/63/"},
  :permissions-error? true},
 :data {:rows [], :cols []}}

Our users are in a group with View collection access to this Dashboard and in the Database associate to this dashboard, they have Granular Data Access.

Could you help us?

Thanks in advance.

Hi @juan.moreno
You are seeing this issue:
https://github.com/metabase/metabase/issues/18009 - upvote by clicking :+1: on the first post

Good morning @flamber,

Just to confirm, this issue was reported last year and it's still open, isn't it?

Thank you so much.

@juan.moreno Yes, the issue is still open. I cannot provide you a timeline.