dashboard doesn't work with users with only limited privileges( read privileges to dashboard which has lens visualization)

[rashmivkulkarni]

Kibana 8.0

Create an user with limited privileges to a Lens Dashboard, ( just give read only permission) , you hit a 403 unauthorized error.

cc @LeeDr

[elasticmachine]

Pinging @elastic/kibana-app (Team:KibanaApp)

[rashmivkulkarni]

Tried with evern giving read pemissions on embedded visualizations in the dashboard, but still fails with

 proc [kibana] server    log   [13:55:36.464] [error][browser-driver][execute][headless-browser-console][kenagpxr108f9d0062ccg0jg][plugins][printable_pdf][reporting] Failed to load resource: the server responded with a status of 403 (Forbidden)
   │ proc [kibana] server    log   [13:55:36.491] [info][execute][kenagpxr108f9d0062ccg0jg][plugins][printable_pdf][reporting] handled 113 page requests
   │ proc [kibana] server    log   [13:55:36.494] [error][execute][kenagpxr108f9d0062ccg0jg][plugins][printable_pdf][reporting] Reporting encountered an error on the page: Error: Error: Forbidden
   │ proc [kibana]     at Fetch.fetchResponse (http://localhost:5620/9007199254740991/bundles/core/core.entry.js:58421:13)
   │ proc [kibana]     at async interceptResponse (http://localhost:5620/9007199254740991/bundles/core/core.entry.js:58833:10)
   │ proc [kibana]     at async http://localhost:5620/9007199254740991/bundles/core/core.entry.js:58319:39
   │ proc [kibana] server    log   [13:55:36.495] [error][error][esqueue][plugins][queue-worker][reporting] ken6wp8k108f9d0062flti4y - Failure occurred on job kenagpxr108f9d0062ccg0jg: Reporting encountered an error on the page: Error: Error: Forbidden

[rashmivkulkarni]

related PR : #76713

[rashmivkulkarni]

Here I had given dashboard_all privilege to the user who had logged in test_user The role definition was as follows:

        global_dashboard_all: {
          kibana: [
            {
              feature: {
                dashboard: ['all'],
              },
              spaces: ['*'],
            },
          ],
        },

But still the screen shows that the user needs additional privileges to edit the dashboard. I think this is a bug.
cc @LeeDr

[kertal]

Here I had given dashboard_all privilege to the user who had logged in test_user The role definition was as follows:

        global_dashboard_all: {
          kibana: [
            {
              feature: {
                dashboard: ['all'],
              },
              spaces: ['*'],
            },
          ],
        },

But still the screen shows that the user needs additional privileges to edit the dashboard. I think this is a bug.
cc @LeeDr

I've created such a user in my local Kibana instance and it worked locally. I guess this was done in a test setup? And I think it makes sense to create a separate issue, since it's a different issue then the one mentioned at the start of this issue