Menüyü Göremiyorum / Yetkim Yok

Menüyü göremiyorum, yetkim yok, permission denied.

Problem: "Dashboard/Strategy/Admin menüsü görünmüyor, 403 error" Severity: High Cause: Permission / Role / Tenant mismatch

---

Quick Diagnosis

Symptom:
├─ Menu missing → Role issue (wrong role assigned)
├─ 403 Forbidden error → Permission guard issue
├─ Different tenant data visible → Tenant isolation issue
└─ Can't access admin panel → ADMIN/SUPER_ADMIN role gerekli

---

Çözüm 1: Role Check

Check Your Current Role

In app:

1. Top-right corner → Profile menu

2. My Profile veya Settings

3. "Current Role" → Ne görüntüleniyor?

   Expected by menu:
   ├─ Strategy menu visible → STRATEGY_MANAGER or higher needed
   ├─ Admin menu visible → ADMIN or SUPER_ADMIN needed
   ├─ OKR menu visible → All roles (MEMBER+)
   └─ Dashboard visible → All roles

Check Expected Role vs Assigned

Menu	Required Role
Dashboard	MEMBER+
My OKR	MEMBER+
Strategy	STRATEGY_MANAGER+
Themes	STRATEGY_MANAGER+
Admin	ADMIN+
Audit Log	ADMIN+
Users	ADMIN+

If your role doesn't match: → Contact ADMIN, request role change

---

Çözüm 2: Permission Guard Issue

403 Forbidden Error

Scenario: "Menu görünüyor ama click'te 403 veriyor"

Root Causes

1. Role changed recently?
   → Browser cache issue (Try refresh)

2. Tenant switched?
   → Different tenant, different permissions
   → Check top-left tenant selector

3. Session expired?
   → Login again, new session

Fix

1. Hard refresh: Ctrl+Shift+R (Windows) / Cmd+Shift+R (Mac)

2. Browser cache clear:

   • Settings → Clear browsing data

   • Select "Cookies and cached images"

   • Refresh

3. Logout/Login:

   • Logout (Top-right → Logout)

   • Login again

   • Check if menu visible

---

Çözüm 3: Tenant Mismatch

Symptom

"Başka tenant'ın verilerini görüyorum" / "Yanlış organizasyon?"

Root Cause

Tenant isolation issue atau wrong tenant switch.

Fix

1. Top-left Tenant Selector check

2. Doğru tenant seçili mi?

3. Değilse, correct tenant seç

4. Dropdown'da tenant'ın adı: "{Company Name}"

Eğer yanlış tenant'taysanız:

• Correct tenant'ı seçin

• New session starts

• Permission'lar tenant-specific

---

Çözüm 4: ADMIN Panel Erişim

Problem

"Admin menüsü görünmüyor"

Requirements

ADMIN or SUPER_ADMIN role:

Role	Admin Access
SUPER_ADMIN	✅ All tenants
ADMIN	✅ Own tenant
STRATEGY_MANAGER	❌ No access
TEAM_LEAD	❌ No access
MEMBER	❌ No access

If No Admin Role

1. Request from current ADMIN

2. Message: "Need ADMIN role for user management"

3. ADMIN approves/denies

---

Çözüm 5: Org Unit Scope

Problem

"Başka bölüm verilerini görmesi gerekiyor"

Access by Org Unit

• TEAM_LEAD: Only own unit visible

• STRATEGY_MANAGER: All units visible

• MEMBER: Only assigned items visible

Org tree:
├─ Finance (TEAM_LEAD: John)
│  └─ John sees: Finance + reports only
├─ Sales (TEAM_LEAD: Mary)
   └─ Mary sees: Sales + reports only
└─ STRATEGY_MANAGER: All units visible

If TEAM_LEAD needs access to other unit:

1. STRATEGY_MANAGER'a request

2. Reason: "Need cross-unit visibility for OKR alignment"

3. May need role upgrade

---

Verification Checklist

Before contacting support:

✓ Correct role assigned?
  □ Check profile

✓ Browser cache cleared?
  □ Ctrl+Shift+R

✓ Correct tenant selected?
  □ Check top-left dropdown

✓ Logged out and back in?
  □ Logout → Login

✓ Still not working?
  → Contact ADMIN + describe symptom

---

Contact ADMIN

If still no access:

1. ADMIN contact: Find ADMIN in Users list

2. Message content:

   "Hi, I can't access [MENU/FEATURE]. 
   Current role: [ROLE]
   Needed for: [REASON]
   Error: [ERROR MSG if any]"

3. ADMIN actions:

   • Verify role assignment

   • Check permission tables

   • Update if needed

   • Notify you

---

Common Mistakes

❌ Mistake: "Browser tab eski açık, refresh etmedim" ✅ Fix: Hard refresh (Ctrl+Shift+R)

❌ Mistake: "Tenant switch ettim, eski tenant verilerini bekliyorum" ✅ Fix: Her tenant completely isolated. New tenant'ta yeni start.

❌ Mistake: "MEMBER rolü, admin panel talep ediyorum" ✅ Fix: Impossible. ADMIN+ role gerekli. Justification needed.

---

System Limitations (By Design)

These are intentional:

✅ Good (Secure):

• Can't see other tenant's data (isolation)

• Can't access admin without ADMIN role (security)

• Can't see other unit if TEAM_LEAD (scope control)

---

İlgili Sayfalar

• RBAC Model

• Admin Panel

• Tenant İzolasyonu