Forum Discussion

nisuomi's avatar
nisuomi
Icon for Resolver I rankResolver I
8 years ago
Solved

Security: RLS & columns

Hi,   I have a case where we have a colum what tells if the person has a special rights to read data with a certain level or not. And we have 6 different levels of data in our hierarchy. Example d...
Need Help
  • nisuomi's avatar
    nisuomi
    8 years ago

    Hello v-jiascu-msft,

     

    Yeah I know it would be good practice to share the files always, but they are not so anonymized yet.

    Actually when I started to make it more random data, it started to work for some reason ... ? 

     

    Alltho' I changed my DAX a little bit to this:

    	IF(maxX (Filter(RLSTable, RLSTable[User]=USERPRINCIPALNAME()) , RLSTable[RIGHTS]) = 1,
	LOOKUPVALUE(RLSTable[level1],'RLSTable'[User],USERPRINCIPALNAME()) = 'f_data'[level1],
		IF(maxX (Filter(RLSTable, RLSTable[User]=USERPRINCIPALNAME()) , RLSTable[RIGHTS]) = 4,
			LOOKUPVALUE(RLSTable[level4],'RLSTable'[User],USERPRINCIPALNAME()) = 'f_data'[level4]

    I have to check this more deeply if it actually now works. And I try to anonymize the data also for others to use.

     

     

    Cheers,

    Niko

v-jiascu-msft's avatar
v-jiascu-msft
Icon for Microsoft Employee rankMicrosoft Employee
8 years ago

Hi Niko,

 

Please share a dummy pbix file. You can upload it to the cloud drive like OneDrive, GoogleDrive, then share the download link here.

 

 

Best Regards,
Dale

nisuomi's avatar
nisuomi
Icon for Resolver I rankResolver I
8 years ago

Hello v-jiascu-msft,

 

Yeah I know it would be good practice to share the files always, but they are not so anonymized yet.

Actually when I started to make it more random data, it started to work for some reason ... ? 

 

Alltho' I changed my DAX a little bit to this:

	IF(maxX (Filter(RLSTable, RLSTable[User]=USERPRINCIPALNAME()) , RLSTable[RIGHTS]) = 1,
	LOOKUPVALUE(RLSTable[level1],'RLSTable'[User],USERPRINCIPALNAME()) = 'f_data'[level1],
		IF(maxX (Filter(RLSTable, RLSTable[User]=USERPRINCIPALNAME()) , RLSTable[RIGHTS]) = 4,
			LOOKUPVALUE(RLSTable[level4],'RLSTable'[User],USERPRINCIPALNAME()) = 'f_data'[level4]

I have to check this more deeply if it actually now works. And I try to anonymize the data also for others to use.

 

 

Cheers,

Niko

  • v-jiascu-msft's avatar
    v-jiascu-msft
    Icon for Microsoft Employee rankMicrosoft Employee
    8 years ago

    Thanks for sharing, Niko. You can post further questions anytime.

     

     

    Best Regards,
    Dale