User can't save new questions

Hello, we are currently seeing an issue with certain users who are creating new questions that tell them they do not have permission to run ad-hoc queries against database x. The issue seems to be inconsistent as they have report that they can save the question sometimes but not other times.

The user is a member of a group that has proper collection permissions and database permissions to the mentioned database. Logs are not providing useful information that I have been able to find.

“browser-info”: {
“language”: “en-US”,
“platform”: “MacIntel”,
“userAgent”: “Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36”,
“vendor”: “Google Inc.”
“system-info”: {
“file.encoding”: “UTF-8”,
“”: “OpenJDK Runtime Environment”,
“java.runtime.version”: “11.0.7+10-post-Ubuntu-2ubuntu218.04”,
“java.vendor”: “Ubuntu”,
“java.vendor.url”: “”,
“java.version”: “11.0.7”,
“”: “OpenJDK 64-Bit Server VM”,
“java.vm.version”: “11.0.7+10-post-Ubuntu-2ubuntu218.04”,
“”: “Linux”,
“os.version”: “5.3.0-1019-aws”,
“user.language”: “en”,
“user.timezone”: “Etc/UTC”
“metabase-info”: {
“databases”: [
“hosting-env”: “unknown”,
“application-database”: “mysql”,
“application-database-details”: {
“database”: {
“name”: “MySQL”,
“version”: “5.6.40-log”
“jdbc-driver”: {
“name”: “MariaDB Connector/J”,
“version”: “2.5.1”
“run-mode”: “prod”,
“version”: {
“date”: “2020-04-21”,
“tag”: “v0.35.3”,
“branch”: “release-0.35.x”,
“hash”: “1d424cb”
“settings”: {
“report-timezone”: null

Hi @Murphysc
This has been reported once before: ERROR: '' You do not have permissions to run native ad-hoc queries against database 3. ''
But there hasn’t been enough information on how to reproduce this issue.

By any chance, are you using a proxy?

Just for reference, so it can be searched, the full error is: You do not have permissions to run ad-hoc native queries against Database 3

We do not use a proxy.

I took a look at the linked post, I notice that they too were using non-english characters. Not really sure if that could be related, just a thought.

I will try to search our logs with the string you provided though.