We're trying to implement a workaround for the lack of column-level and page-level security. We want to block a particular user group from viewing profitability metrics, which are stored as fields in a Deals table alongside others we want to summarize (let's say production volume). Basically, I want profitability metrics to zero out / be invisible to the one group but have no other impacts on the reports or structure.
We tried breaking up the Deals table, into a "Production" table without RLS, and a "Profitability" table with RLS. (Note that to avoid any cross filtering complications, in the description below these were stored with no relationship between the tables.)
When viewing the data, everything works as intended - when viewing as the one user group, the Production table appears normally and the Profitability table appears with no rows.
What's odd is that the Profitability data is still active under the surface - if I create a calculated column in the Production table doing a SUMX off the Profitability table, I get the same figures as if RLS had not been active... even though the Profitability table itself appears to be blank.
This begs two questions:
- Does this mean that RLS is only relevant to display purposes, but not actual data analysis, and is purely for optics? If so it seems pretty weak.
- Given the description above does anyone have ideas for an alternate workaround?
Many thanks,
