Azure / Azure/static-web-apps

User Permissions Remain in Azure Static Web Apps After Removal from Role Management

Open
#1,616 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
346
Forks
67
PR merge metrics
No merged PRs in 30d

Description

In Azure Portal, after removing a user from Static Web Apps - Role Management, the user may still display either admin or reader permissions when accessing /.auth/me. Only one of these permissions will appear, and which one appears seems to be random.

**To Reproduce**
Steps to reproduce the behavior:
1. Go to 'Azure Portal'
2. Delete user in 'Role management'
3. Go to the website and visit '/.auth/me'
4. See error

"userRoles": [
"admin",
"anonymous",
"authenticated"
],
5. Keep refresh '/.auth/me', it sometimes shows "admin" role, sometimes shows "reader" which I added for the user during testing.

**Expected behavior**
Should only see "userRoles": [ "anonymous", "authenticated"]

**Screenshots**
Image

Image

Image

**Device info (if applicable):**
- OS: [MacOS]
- Browser [chrome]
- Version [132]

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.