Gateway - changed service user, but datasets still refreshable with DirectQuery? ->Not in ImportMode

Hi all,

i did a test as I wanted to put in the right service user on a datasource in a Gateway, as the one set up was an admin one.

So what i did is the following:

Created a direct query report in Desktop. Uploaded to Workspace (Prem.Cap.).

Dataset could be updated via DirectQuery/Gateway (under settings: "admin has granted credentials...).

When i did change now the user with less privileges on the source database, the dataset is still refreshable. But the table that it is grabbing is 100% restricted from this "new" user in the connection (cross-checked in SSMS, no access).

If i do the same exercise with an import mode dataset, it is doing what i was expecting. Its stating in the error message that the schema can not access the requested table under the current context.

I am a little bit worried now...as i thought directquery and import mode would be treated the same way in a gateway/datasource.

Why can the direct query dataset still refresh data withour any permission?