OC4 Dashboard -'Component not registered' when lacking permission

[MartinK85]

We have a plugin (https://octobercms.com/plugin/vdlp-redirect) containing two report widgets for use on the dashboard, one for displaying statistics and the other for creating new records. Up until now both widgets were covered by a single permission but we are attempting to split this into two permissions, one that allows full access to the plugin and a separate permission that only allows access to statistics.

Both report widgets are registered in the plugin's registerReportWidgets and have been assigned the correct permissions via the permissions-key.

For full context: https://github.com/vdlp/oc-redirect-plugin/pull/107/files

After adding the statistics widget to the dashboard as a user with all permissions and logging in as a user that only has the statistics-permission an error is displayed instead of the widget:

Expected behaviour would be for the widget to not be shown at all if the user does not have the required permission.

All October packages are on v4.0.7.

[MartinK85]

Noticed a change in this behaviour in Dashboard v4.0.9, the 'Component not registered' message is shown in an error-modal instead, the widget itself (besides a configured title) shows empty:

In case it helps 🙂

[daftspunk]

Hey @MartinK85 , can you test it on the latest (v4.0.18) and see if there are any changes?

[MartinK85]

Hey @daftspunk , ran a new test with every october/-package updated to v4.0.18:

Looks to be the same error, although the line number has shifted a bit

"Widget class [Vdlp\Redirect\VueComponents\CreateRedirect] not registered." on line 80 of /var/www/html/modules/dashboard/widgets/dash/HasWidgetData.php