If you create a dashboard where one of the panels is not visible to a user,
When that user goes to the page instead of just hiding that one panel, you get a full page Permission Denied, even if they have viewing rights to the dashboard and multiple panels on it.
I would expect that one panel to be hidden, but the rest being visible. At worst (and this would be worse than hidding) would be to display a panel square with Permission Denied for that given panel. But I would much rather have it hidden, that way I can add group specific elements on a default installed dashboard.
Steps.
- Create a new dashboard with default widgets, viewable by "all".
- Install the dashboard on another user.
- Change on of the panels to only be visible to some project which that user is not a member of
- User now gets a full screen permission denied for the dashboard, doesn't get a single panel
Versions:
phabricator fea2389066edf3ad0a7547ae12d8e988428a4f5c (Sat, Apr 2)
arcanist f89f3de65805f7f65c8082ed387e8e2572596f7a (Sat, Mar 19)
phutil d414e4436e1c8779634458c23ab8880cf613312f (Fri, Apr 1)