1.0 Release - Permissions Related Errors

[harshach]

• Remove default role and policy at organization level. Login as non-admin user, Click on Govern -> Glossary we are showing empty page

Its redirecting 404 page

• Looks like we do not have any 404 page anymore? ^

[harshach]

• If the user doesn't have viewTests permission we throw an error in explore . We should ignore it and not show the data

• if the user doesn't have permission to view the data we should show the they don't have permission to view the data in the right panel , right now we throw an error notification

[harshach]

• In Organization page, Click on Roles and we show this generic message thats not related to the function --> @Ashish8689

We should say "Add A role to {team_name}. This role will be inherited by all the users in this team {team_name} and the all the teams under {team_name}" better text from @sureshms or @ShilpaVernekar

@harshach we have updated and verified this with @ShilpaVernekar

[harshach]

• As a user with viewAll policy I can go to the data my team owned. I can create an announcement on that entity

I shouldn't be able to add the announcement if I don't have edit access on that entity cc @sureshms @chirag-madlani

I can add an annoucement but I can't delete the announcement I created

I can edit annoucement

solution for me , If I do not have edit access lets not allow user to create Annonucement on it .

This is being tracked here -> #11374

[harshach]

• Select mutually exclusive tags
  . We throw the error after adding the tags, this can be cumbersome as the user can select 5 tags and 2 of them conflict we throw an error all the other tags are not added.
  Second issue, is visually we show that tags are added but error is thrown , even after clearing the error the tags appear as added until the user refreshes the page. We need to do better here. It will be great if we show that user is selecting mutually exclusive tag while selecting it.

[harshach]

• If the user doesn't have Edit Tags option the Request Tags and Conversation icons shows at the end out of the way of tags which looks weird

[ShilpaVernekar]

Slightly modified the text
cc @harshach @sureshms @chirag-madlani
"Add a Role to {team_name}. This role will be inherited by all the Users in the Team {team_name} as well as all the Teams under {team_name}"

[harshach]

• default organization policy allows users to set ownership on the entity without owners. This works on the table but not the topic, pipeline, mlmodel, or containers

[harshach]

• user with Data Consumer role which has ViewAll, EditTags, EditDescription doesn't allow edit option for charts

Pipeline Tasks doesn't allow add descriptions or tags

MlModel doesn't even allow edit tags or description at the entity level

Tags are not shown at Container level. The description is allowed to edit

Container Schema's description is not allowed to edit or added tags for