V50 group permission issue

Bug reports
1

Hi, I have migrated to v50 metabase and noticed that every time I create a new group it will automatically add the database permissions to "Query builder and native" with the following json @ api/permissions/graph/group/5 api query:

{
    "revision": 0,
    "groups": {
        "5": {
            "11": {
                "download": {
                    "schemas": "full"
                },
                "view-data": "unrestricted",
                "create-queries": "query-builder-and-native"
            }
        }
    }
}

All users group has the same database set to "No" with the following response to api/permissions/graph/group/1 being

{"revision":0,"groups":{}}

This happens whenever i just click to create a new group using the metabase UI. How do i prevent any new group from having access to the databases by default in the v50 version? It used to work fine with the previous v49 version.

2

I noticed that the permissions to the database 11 are not automatically granted to newly created groups only if i update the allUsers (group 1) with the following:

{
    "revision": 2,
    "groups": {
        "1": {
            "11": {
                "view-data": "unrestricted",
                "create-queries": "no"
            }
        }
    }
}

Otherwise if a database is not included as restricted within the allUsers groups it seems that it defaults to granting the database permission. Has anyone faced this issue?

3

we changed the way we assign permissions, and we did that to avoid any nasty automatic permission grant which admins didn't want