Forum Discussion
Row Level Security - Admin Users not in security tables
We have implemented row level security based on below requirement : one AD group XYZ that has below user levels based on security predicate as follows : 1. Executive : [Executive Email]= userpri...
Hi jaweher899
Thank you for your response. As I mentioned in my request, I have already created "AllRole" with no RLS i.e 1=1but it seems to apply the 1=1 for all users and show everything to executives, Head of , etc without checking username.
Basically, if the login user is not in the User Hierarchy table then he should see everything.
jaweher899
Impactful Individual
Impactful IndividualWhat's not exactly working please? May be you've some users exist in more than one AD.
We have only 1 AD group with executives, Headof,SM, Specialist as well as admin users.
As the admin users are also members of the same AD group , the condition 1=1 overrides the other RLS filters and displays everything to other users.
Sales AD Group User Role Exists in User Table Executive Head Of SM Specialist AllRole A [email protected] Executive Y [Executive Email]=userprincipalname() TRUE FALSE FALSE FALSE TRUE B [email protected] Head Of Y [Headof Email]=userprincipalname() FALSE TRUE FALSE FALSE TRUE C [email protected] SM Y [SM Email]=userprincipalname() FALSE FALSE TRUE FALSE TRUE D [email protected] Specialist Y [Email]=userprincipalname() FALSE FALSE FALSE TRUE TRUE E [email protected] AllRole N 1=1 TRUE TRUE TRUE TRUE TRUE