Bug description

Annotations are existing (created by an administrator)

Gamma user (with permission on a dataset) can create a chart but 'Fobidden' is present in the annotation list

Image

Gamma role has not "can read on Annotation" permission (with superset 4.0.2, 5.0.0 or 6.0.0RC1-dev)

Image

The role should have this permission by default

Screenshots/recordings

No response

Superset version

master / latest-dev

Python version

3.9

Node version

16

Browser

Chrome

Additional context

No response

Checklist

  • [ ] I have searched Superset docs and Slack and didn't find a solution to my problem.
  • [ ] I have searched the GitHub issue tracker and didn't find a similar bug report.
  • [ ] I have checked Superset's logs for errors and if I found a relevant Python stacktrace, I included it here as text in the "additional context" section.

Comment From: dosubot[bot]

The Gamma role does not have "can read on Annotation" permission by default—this is intentional and matches both the code and documentation. Annotation and AnnotationLayer permissions are restricted to Alpha users and above, as defined in the SupersetSecurityManager and documented in the security docs. Gamma is designed as a limited, viewer-like role and should not have management or annotation access by default (source, docs).

If you need Gamma users to access annotations, you can manually grant the relevant permissions or create a custom role, but this is not recommended for the base Gamma role due to security and upgrade risks. Superset will re-sync standard roles on upgrades, so customizations may be lost (docs).

To reply, just mention @dosu.


How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other  Chat with Dosu Join Discord Share on X