https://www.growthbook.io/ logo
Join Slack
Powered by
Hey team! We're running into a weird permissions i...
# ask-questions
n
Hey team! We're running into a weird permissions issue and would love some help debugging. Our setup: • Users are invited with global role = No Access • They get an Experimenter project-scoped role on their specific project • The Experimenter role has both Fact Tables Full Access and Fact Metrics Full Access enabled • The project's Data Source is set to All Projects The issue: users can't create Fact Tables, but after we created one for them, they were able to create Fact Metrics just fine — which requires the same permission level. We're not sure if this is a scoping issue with how Fact Table creation is evaluated vs. Fact Metric creation, or something else entirely. Erro message, and permissions for role 
Experimenter
attached for reference Has anyone run into this before?
b
Hey, Larissa! Sorry to hear you're having trouble. Digging into this now. (Thanks in advance for the screenshots - that is super helpful)
Hey, Larissa! I think I'm found a way to replicate this. For the user(s) running into this, do they have the 
Experimenter
role on multiple projects? To replicate this, I created a user that has a global 
No Access
role, and then was an 
Experimenter
on two projects. In that case, we allow the user to toggle between projects in the top-left corner and also show an 
All Projects
dropdown. Its confusing today, but if the 
All Projects
is selected, when a user trying to create a Fact Table, we assume they're trying to create the Fact Table in 
All Projects
. On the other hand, if a specific project is selected in the top-left corner, we assume the user is trying to create the Fact Table in that project. So in this case, the user will just need to change the project in the top-left dropdown and then they'll pass the permission check. I realize this isn't ideal and is confusing, so I'll raise this with the team. (And if this isn't the issue, please let me know and I can investigate further.)
n
I thought this could be the root issue, but the user in question is only assigned to a single project, so they can't even see multiple projects in the project selection menu =/
b
Thanks for confirming - I'll take another look with this info. Thanks!
thankyou 1
Larissa - I've not yet been able to replicate the issue just yet. Are you using GrowthBook Cloud or are you self-hosting? If Cloud, could you tell me your org name - I'll be able to look into things a bit further, if so.
n
We are self-hosting =/
b
No problem. Could you do a few things for me. Could you send screenshots of the Data Source that the user is building this on, as well as a screenshot of the user's role info via the 
/settings/team
page? You're welcome to DM me those directly, and you can redact the name of the Data Source & the name/email of the user for security. I'm just going to set up my local env as close as I can to try and replicate.
👍 1
7 Views
Open in Slack
PreviousNext
Powered by