No permission to access dashboard

Hey,

Getting a strange issue. We have created a group which have "View collection" permission to a folder which had 4 dashboards earlier. Now, we added 2 new dashboards today but the people in this group getting " Sorry, you don’t have permission to see that" error.
Surprisingly, they can access the older dashboards but not 2 new ones. All questions are there in the same folder as well. Not sure what's the issue.

Currently on 0.39.2 version and using athena-metabase driver for connection to db.
Can you please help on this ?

Hi @outlier
Post "Diagnostic Info" from Admin > Troubleshooting.
Post the full error from Admin > Troubleshooting > Logs.

Hey @flamber
Thanks for the quick revert.

"Diagnostic Info" ->

{
"browser-info": {
"language": "en-GB",
"platform": "MacIntel",
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.106 Safari/537.36",
"vendor": "Google Inc."
},
"system-info": {
"file.encoding": "UTF-8",
"java.runtime.name": "OpenJDK Runtime Environment",
"java.runtime.version": "1.8.0_265-b01",
"java.vendor": "Oracle Corporation",
"java.vendor.url": "http://java.oracle.com/",
"java.version": "1.8.0_265",
"java.vm.name": "OpenJDK 64-Bit Server VM",
"java.vm.version": "25.265-b01",
"os.name": "Linux",
"os.version": "4.14.104-95.84.amzn2.x86_64",
"user.language": "en",
"user.timezone": "UTC"
},
"metabase-info": {
"databases": [
"athena",
"mysql",
"googleanalytics"
],
"hosting-env": "unknown",
"application-database": "mysql",
"application-database-details": {
"database": {
"name": "MySQL",
"version": "5.7.12"
},
"jdbc-driver": {
"name": "MariaDB Connector/J",
"version": "2.6.2"
}
},
"run-mode": "prod",
"version": {
"tag": "v0.39.2",
"date": "2021-05-17",
"branch": "release-x.39.x",
"hash": "b0d9436"
},
"settings": {
"report-timezone": "Asia/Calcutta"
}
}
}

Logs ->

[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:40+05:30 DEBUG metabase.server.middleware.log GET /api/user/current 200 11.1 ms (3 DB calls) App DB connections: 1/15 Jetty threads: 4/50 (9 idle, 0 queued) (128 total active threads) Queries in flight: 0 (0 queued)
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:40+05:30 DEBUG metabase.server.middleware.log GET /api/session/properties 200 9.4 ms (2 DB calls) App DB connections: 0/15 Jetty threads: 4/50 (9 idle, 0 queued) (128 total active threads) Queries in flight: 0 (0 queued)
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:40+05:30 DEBUG metabase.server.middleware.log GET /api/database 200 11.6 ms (3 DB calls) App DB connections: 0/15 Jetty threads: 3/50 (10 idle, 0 queued) (126 total active threads) Queries in flight: 0 (0 queued)
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:40+05:30 DEBUG metabase.server.middleware.log GET /api/dashboard/394 200 126.5 ms (23 DB calls) App DB connections: 1/15 Jetty threads: 4/50 (8 idle, 0 queued) (126 total active threads) Queries in flight: 0 (0 queued)
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.5 s; using 'magic' TTL of 4.1 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.5 s; using 'magic' TTL of 4.1 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.1 s; using 'magic' TTL of 3.4 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.2 s; using 'magic' TTL of 3.7 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.5 s; using 'magic' TTL of 4.1 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.3 s; using 'magic' TTL of 3.9 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.3 s; using 'magic' TTL of 3.9 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.4 s; using 'magic' TTL of 4.0 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.3 s; using 'magic' TTL of 3.9 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.0 s; using 'magic' TTL of 3.4 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 INFO metabase.api.card Question's average execution duration is 2.0 s; using 'magic' TTL of 3.4 mins
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 WARN metabase.server.middleware.log GET /api/field/23323/values 403 32.7 ms (4 DB calls)
"You don't have permissions to do that."

[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 WARN metabase.server.middleware.log GET /api/field/28730/values 403 47.4 ms (4 DB calls)
"You don't have permissions to do that."

[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 WARN metabase.server.middleware.log GET /api/field/28730 403 59.2 ms (7 DB calls)
"You don't have permissions to do that."

[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 WARN metabase.server.middleware.log GET /api/field/23323 403 89.4 ms (7 DB calls)
"You don't have permissions to do that."

[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 DEBUG metabase.server.middleware.log GET /api/collection/75 200 89.9 ms (4 DB calls) App DB connections: 5/15 Jetty threads: 8/50 (4 idle, 0 queued) (132 total active threads) Queries in flight: 11 (0 queued)
[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 WARN metabase.server.middleware.log GET /api/field/3000/values 403 15.1 ms (4 DB calls)
"You don't have permissions to do that."

[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 WARN metabase.server.middleware.log GET /api/field/2387/values 403 13.8 ms (4 DB calls)
"You don't have permissions to do that."

[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 WARN metabase.server.middleware.log GET /api/field/2387 403 51.3 ms (7 DB calls)
"You don't have permissions to do that."

[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 WARN metabase.server.middleware.log GET /api/field/3000 403 47.3 ms (7 DB calls)
"You don't have permissions to do that."

[82bdf973-7867-4b61-ad33-99a4c2b5405d] 2021-06-25T20:14:41+05:30 WARN metabase.server.middleware.log GET /api/dashboard/372 403 78.8 ms (11 DB calls)
"You don't have permissions to do that."

@outlier So you are talking about dashboard 394, and I'm guessing that it has a Click Behavior link to dashboard 372, which the users don't have access to. That's this issue:
https://github.com/metabase/metabase/issues/15368 - upvote by clicking :+1: on the first post

1 Like

@flamber Nope. None of the 2 new dashboards have any click behaviour. I'm not sure why its calling dashboard 372

@outlier I'm 99% sure that you have a Click Behavior somewhere, but it likely comes directly from a question, which got those Click Behavior into it's settings.

But make a duplicate of the dashboard, remove all cards, and add them one-by-one until you trigger the permission problem, which then helps you narrowing down the problem.

1 Like

Thanks @flamber
I recreated the dashboards and its working now

@outlier So what was the problem? Or don't you know and just recreated everything?

I wasn't able to find any problem. Just recreated and it worked :grinning:

I had similar issue and on click behaviour was the issue.
Could u please tell me how did you figure that out??

@omkar I don't understand your question. If you're hitting issue 15368, then upvote that issue.