Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
7 years ago

Dynamic row level security with bidirectional filtering

Hi all,   I seem to be struggling implemeting dynamic RLS. My use case is simple:   A star schema with a fact surrounded by a dozen dimensions. All the dimensions have at least one security key....
Need Help
TeigeGao's avatar
TeigeGao
Icon for Solution Sage rankSolution Sage
7 years ago

HI Anonymous ,

>>Am I wrong in thinking that this filter kind of resembles SQL inner joins?

Yes, you can think it as an inner join, for example, if I select two value on column A in table a, then the filter on this column will transfer to another table b which has relationship between table a, the result will like:

select * from b
inner join a
on a.A = a.A
where a.A in (value 1, value 2)

bidirectional filters means that the filter can transfer from table a to table b, or table b to table a.

Best Regards,

Teige

Anonymous's avatar
Anonymous
Not applicable
7 years ago

Now, how would you tackle a situation where I need to filter my fact table AND dimensions attributes.

 

- Put RLS on the fact and have bidirectional filters take care of the dimensions. (connecting my security table to only the fact).

- Putting RLS on all dimensions and then bidirectional filters on the fact. (Connecting the security table to everything but the fact).

 

Initially I wanted to do the latter but it seems to be giving me ambigious path errors. The former seems like it could be abused.