Native App Chairlift Issue with Streamlit Permissions

[sfc-gh-acarson]

Describe the bug
The Native App Quickstart Build a Snowflake Native App to Analyze Chairlift Sensor Data creates a Native App with three sections (Dashboard, Configuration, Sensor Data) and three roles to use the app (CHAIRLIFT_VIEWER, CHAIRLIFT_ADMIN).

CHAIRLIFT_ADMIN should have visibility into all apps/tabs (Dashboard, Configuration, Sensor Data) and CHAIRLIFT_VIEWER should only have access to Dashboard and Sensor Data tabs. However, CHAIRLIFT_VIEWER can see all three (Dashboard, Configuration, Sensor Data), even without USAGE privilege from the underlying application role.

The privileges to the above account-level roles are delegated through the application roles chairlift_app.APP_ADMIN and chairlift_app.APP_VIEWER.

[https://quickstarts.snowflake.com/guide/native-app-chairlift/index.html?index=..%2F..index#9]

show grants to application role chairlift_app.APP_ADMIN;
show grants to application role chairlift_app.APP_VIEWER;
show grants to role chairlift_viewer;