Tomer Brisker wrote:

User with no permission to view dashboard sees a "Permission denied" message when accessing the root path.
Reopen if different behaviour is required.

I'm not going to reopen, as #1632 exists, but I think a different behaviour is required. A few more comments are available in that bug report. Essentially the user should be taken to something sensible after logging in, whether or not they have permission to view the dashboard or hosts. At worst, send them to the about page perhaps.