Role permissions are not respected when using accordion fields

[uebmaster]

Similar to #7291

Preflight Checklist

• I have completed all Troubleshooting Steps.
• I'm on the latest version of Directus.
• There's no other issue that already describes my problem.

Describe the Bug

If i select specific fields that could be edited by a role this are not respected if i am using an accordion field in the collection, i get the error that i don't have permissions to do this, if i delete all the accordion fields then i can update the item without problem.

To Reproduce

1. Create a collection with one or more accordion fields and any others fields.

2. Create a role that can add/see items in the collection but that just can edit some fields, this role needs no filter in custom item permissions field, use custom fields permissions and check some fields that could be edited and uncheck some (fig step 3):

3. Check some fields that could be edited and uncheck some (same than in step 2), save the changes

4. Login with an user from the configured role and add an item.

5. Now edit the item saved before and try to save the changes, you will get an error:

PD: If you eliminate all the accordion fields then you can save the changes without problems.

What version of Directus are you using?

9.0.0-rc.90

What version of Node.js are you using?

14.17.4

What database are you using?

Postgres 13

What browser are you using?

Firefox and chrome in windows, opera gfx and safari in mac

What operating system are you using?

macOS and Windows

How are you deploying Directus?

running locally in ubuntu server 20

[rijkvanzanten]

Can you share a database dump where this is happening? I just tried it in a fresh installation, but don't see the error pop up. I'm assuming there might be a specific interface that's causing havoc within that accordion 🤔

[rijkvanzanten]

Thank you for taking the time to submit this! Unfortunately, our team was not been able to reproduce it based on the information provided. Therefore, we will close this ticket for now, but will happily re-open it if new details are provided that allow us to reliably replicate the problem.

As a reminder:

• Provide as much detail as possible in the issue description
• Video screen captures and clear steps are very helpful
• A full SQL dump is the fastest way for us to test/resolve (can be sent privately)
• Make sure you are on the latest version of Directus
• Did you try turning it off and on again?

---

This is an automated response.