User Permissions Remain in Azure Static Web Apps After Removal from Role Management
- Dominant language
- No language data
- Stars
- 346
- Forks
- 67
- PR merge metrics
- No merged PRs in 30d
Description
In Azure Portal, after removing a user from Static Web Apps - Role Management, the user may still display either admin or reader permissions when accessing /.auth/me. Only one of these permissions will appear, and which one appears seems to be random.
**To Reproduce**
Steps to reproduce the behavior:
1. Go to 'Azure Portal'
2. Delete user in 'Role management'
3. Go to the website and visit '/.auth/me'
4. See error
"userRoles": [
"admin",
"anonymous",
"authenticated"
],
5. Keep refresh '/.auth/me', it sometimes shows "admin" role, sometimes shows "reader" which I added for the user during testing.
**Expected behavior**
Should only see "userRoles": [ "anonymous", "authenticated"]
**Screenshots**
**Device info (if applicable):**
- OS: [MacOS]
- Browser [chrome]
- Version [132]
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.