Bug description
Annotations are existing (created by an administrator)
Gamma user (with permission on a dataset) can create a chart but 'Fobidden' is present in the annotation list
Gamma role has not "can read on Annotation" permission (with superset 4.0.2, 5.0.0 or 6.0.0RC1-dev)
The role should have this permission by default
Screenshots/recordings
No response
Superset version
master / latest-dev
Python version
3.9
Node version
16
Browser
Chrome
Additional context
No response
Checklist
- [ ] I have searched Superset docs and Slack and didn't find a solution to my problem.
- [ ] I have searched the GitHub issue tracker and didn't find a similar bug report.
- [ ] I have checked Superset's logs for errors and if I found a relevant Python stacktrace, I included it here as text in the "additional context" section.
Comment From: dosubot[bot]
The Gamma role does not have "can read on Annotation" permission by default—this is intentional and matches both the code and documentation. Annotation and AnnotationLayer permissions are restricted to Alpha users and above, as defined in the SupersetSecurityManager and documented in the security docs. Gamma is designed as a limited, viewer-like role and should not have management or annotation access by default (source, docs).
If you need Gamma users to access annotations, you can manually grant the relevant permissions or create a custom role, but this is not recommended for the base Gamma role due to security and upgrade risks. Superset will re-sync standard roles on upgrades, so customizations may be lost (docs).
To reply, just mention @dosu.
How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other