Dynamic Row Level Security

[speedramps]

Can you help with this RLS (row Level security) logic please? 

Adk if you need any more info or examples.

The attached PBIX has dynamic row level security rules

Click here to download example PBIX 

The rule are in the Permissions tables for
the DimProduct, DimCustomer and Calendar

For example,

If you view as user 2019@pbi.com then you just see 2019 sales

If you view as user cars@pbi.com then you just see car sales.

If you view as user carsbikes@pbi.com  then you just see car and bike sales.

If you view as user malecarsbikes2019@pbi.com then you just see male, car or bikes for 2019 sales.

I now want to add the functionality to block rows.

For example

If you view as user  carsbikesnot2019@pbi.com then I want to view

cars and bikes sales but exclude car 2019 sales.

Can you suggest RLS logic to do that please?  Thank you

Permissions table.  Note the allow true/false flag 

Roles table security 

Whilst viewing as user carsbikes@pbi.com you just see car and bike sales.

When I view as user  carsbikesnot2019@pbi.com then I want to view

cars and bikes sales
exclude car 2019 sales

but still include the bike 2019 sales.

[HoangHugo]

I think, add new column in Calendar to define which year is "Ex 2019", then add one more filter in RLS like below