<p dir="auto"><strong>Apache Airflow version</strong>:<br>
2.1.0</p>
<p dir="auto"><strong>Environment</strong>:</p>
<ul dir="auto">
<li><strong>Cloud provider or hardware configuration</strong>:</li>
<li>AWS ECS EC2 mode. RDS PostgreSQL for DB.</li>
<li><strong>OS</strong> (e.g. from /etc/os-release):</li>
<li>RedHat</li>
<li>
<ul dir="auto">
<li><strong>Other</strong></li>
</ul>
</li>
<li>LDAP authentication enabled</li>
</ul>
<p dir="auto"><strong>What happened</strong>:<br>
We upgraded from 2.0.1 to 2.1.0 and now when i go to Users view (as admin). I cannot see delete/edit/add buttons - if i try to simply navigate by chaniging url from Users/list to Users/edit/1 for example I get Access Denied as per FAB.<br>
I checked underlying permission tables and from what i can see Admin Role does not have those permissions anymore there.</p>
<p dir="auto">I tried deleting all permissions and with :</p>
<div class="highlight highlight-source-sql notranslate position-relative overflow-auto" dir="auto" data-snippet-clipboard-copy-content="delete from dbo.ab_permission_view_role
delete from &quot;dbo&quot;.&quot;ab_permission_view&quot; "><pre class="notranslate"><span class="pl-k">delete</span> <span class="pl-k">from</span> <span class="pl-c1">dbo</span>.<span class="pl-c1">ab_permission_view_role</span>
<span class="pl-k">delete</span> <span class="pl-k">from</span> <span class="pl-s"><span class="pl-pds">"</span>dbo<span class="pl-pds">"</span></span>.<span class="pl-s"><span class="pl-pds">"</span>ab_permission_view<span class="pl-pds">"</span></span> </pre></div>
<p dir="auto">and then re-run airflow sync-perms<br>
this did not help.</p>
<p dir="auto">loks like the default permissions settings are now defaulting to read-only even for admin on users tab.</p>
<p dir="auto">the following query:</p>
<div class="highlight highlight-source-sql notranslate position-relative overflow-auto" dir="auto" data-snippet-clipboard-copy-content="select abv.permission_id, abv.view_menu_id, avm.name as view_name, ap.name as permission_name
from &quot;dbo&quot;.&quot;ab_permission_view&quot;  abv
inner join dbo.ab_view_menu avm
on abv.view_menu_id = avm.id
inner join dbo.ab_permission ap
on abv.permission_id = ap.id
WHERE
    avm.name = 'Users'"><pre class="notranslate"><span class="pl-k">select</span> <span class="pl-c1">abv</span>.<span class="pl-c1">permission_id</span>, <span class="pl-c1">abv</span>.<span class="pl-c1">view_menu_id</span>, <span class="pl-c1">avm</span>.<span class="pl-c1">name</span> <span class="pl-k">as</span> view_name, <span class="pl-c1">ap</span>.<span class="pl-c1">name</span> <span class="pl-k">as</span> permission_name
<span class="pl-k">from</span> <span class="pl-s"><span class="pl-pds">"</span>dbo<span class="pl-pds">"</span></span>.<span class="pl-s"><span class="pl-pds">"</span>ab_permission_view<span class="pl-pds">"</span></span>  abv
<span class="pl-k">inner join</span> <span class="pl-c1">dbo</span>.<span class="pl-c1">ab_view_menu</span> avm
<span class="pl-k">on</span> <span class="pl-c1">abv</span>.<span class="pl-c1">view_menu_id</span> <span class="pl-k">=</span> <span class="pl-c1">avm</span>.<span class="pl-c1">id</span>
<span class="pl-k">inner join</span> <span class="pl-c1">dbo</span>.<span class="pl-c1">ab_permission</span> ap
<span class="pl-k">on</span> <span class="pl-c1">abv</span>.<span class="pl-c1">permission_id</span> <span class="pl-k">=</span> <span class="pl-c1">ap</span>.<span class="pl-c1">id</span>
<span class="pl-k">WHERE</span>
    <span class="pl-c1">avm</span>.<span class="pl-c1">name</span> <span class="pl-k">=</span> <span class="pl-s"><span class="pl-pds">'</span>Users<span class="pl-pds">'</span></span></pre></div>
<p dir="auto">returns only one row with can_read under permission_name</p>
<p dir="auto">not sure if this is related, but i can see this change in 2.1.0<br>
<a href="https://github.com/apache/airflow/pull/13856/commits">https://github.com/apache/airflow/pull/13856/commits</a></p>
<p dir="auto"><strong>What you expected to happen</strong>:<br>
Users with Admin role can still fully edit Users view.</p>
<p dir="auto"><strong>How to reproduce it</strong>:<br>
Best i can say: just upgrade from 2.0.1 to 2.1.0</p>
<p dir="auto"><strong>Apache Airflow version</strong>: 2.1.0</p>
<p dir="auto"><strong>Browsers</strong>: Chrome and Firefox</p>
<p dir="auto"><strong>What happened</strong>:</p>
<p dir="auto">Before upgrading to 2.1.0</p>
<p dir="auto"><a target="_blank" rel="noopener noreferrer nofollow" href="https://user-images.githubusercontent.com/14293802/120359517-c1ca1100-c2d5-11eb-95ba-58ccc0a3ac37.png"><img src="https://user-images.githubusercontent.com/14293802/120359517-c1ca1100-c2d5-11eb-95ba-58ccc0a3ac37.png" alt="before" style="max-width: 100%;"></a></p>
<p dir="auto">After upgrading to 2.1.0</p>
<p dir="auto"><a target="_blank" rel="noopener noreferrer nofollow" href="https://user-images.githubusercontent.com/14293802/120359528-c4c50180-c2d5-11eb-8e04-f34846ea2736.png"><img src="https://user-images.githubusercontent.com/14293802/120359528-c4c50180-c2d5-11eb-8e04-f34846ea2736.png" alt="after" style="max-width: 100%;"></a></p>
<p dir="auto"><strong>What you expected to happen</strong>:</p>
<p dir="auto">Show/Edit/Delete under Security -&gt; Users are available</p>

<p dir="auto"><strong>How to reproduce it</strong>:</p>
<p dir="auto">Go to Security -&gt; Users (as an admin of course)</p>