Improve error message for security panel
What does this MR do and why?
This MR improves error messaging for analytics dashboard panels by separating license requirements from role-based permission checks. Users now receive specific feedback when they lack sufficient permissions versus missing an Ultimate license.
Problem being solved
Users with Ultimate licenses but insufficient role permissions received unclear error messages when accessing security panels.
Changes made
- Separated license validation from permission validation
- Added specific error message for insufficient permissions
- Updated documentation to clarify security metrics require Developer role
- Implemented Ultimate license detection in dashboard components
Screenshots or screen recordings
| Before | After |
|---|---|
 |
 |
How to set up and validate locally
- Set up a group or project with Ultimate license
- Create a user with Guest or Reporter role (below Developer)
- Navigate to the Value Streams Dashboard at
/-/analytics/dashboards - Observe the security metrics panel shows "insufficient permissions" message
- Upgrade user to Developer role
- Verify security metrics panel now displays data
- Test with non-Ultimate license to confirm license-specific messaging still works
Key Changes Summary
| Component | Action |
|---|---|
| Analytics Dashboard Panel | Implement separate license and permission validation |
| Error Messages | Add specific insufficient permissions message |
| Documentation | Update security metrics requirements |
| Helper Methods | Add Ultimate license detection |
| Test Coverage | Update specs for new permission logic |
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Related to #558232 (closed)
Edited by Ezekiel Kigbo