Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
6 years ago
Solved

Filtering column by dynamic role

Hi all,   As a newbeginner this might be a very silly question. Still, after hours of googleing I haven't managed to find the solution on my own.   I'm using a report that can be filtered by a se...
  • lbendlin's avatar
    lbendlin
    6 years ago

    That's actually a conflict.  If you are limiting visibility to a certain company by using RLS then that will prevent that user from seeing the data from the other companies.

     

    Reza Rad describes that scenario in great detail, but the gist is that you would need to create a second shadow set of tables that is hidden from view, and not governed by RLS.  That way you can compare the current selection to the complete data set.

     

    HUGE WARNING:  Security by Obscurity does not work.  Any sufficiently knowledgeable user can crack this setup in seconds and get access to data they should not see based on the RLS.

lbendlin's avatar
lbendlin
Icon for Super User rankSuper User
6 years ago

That's actually a conflict.  If you are limiting visibility to a certain company by using RLS then that will prevent that user from seeing the data from the other companies.

 

Reza Rad describes that scenario in great detail, but the gist is that you would need to create a second shadow set of tables that is hidden from view, and not governed by RLS.  That way you can compare the current selection to the complete data set.

 

HUGE WARNING:  Security by Obscurity does not work.  Any sufficiently knowledgeable user can crack this setup in seconds and get access to data they should not see based on the RLS.

Anonymous's avatar
Anonymous
Not applicable
6 years ago

That's what I thought. Adding tables made it work as wanted. Thank you for your guidance!

 

Julia