Forum Discussion
OLS issue
[email protected] is already mapped within a previously created RLS role, John has full access to all the reports, as he has the highest role within user table.
Is it still possible to create an OLS role on a Measure table and not assign him to that role, so that the measure table is not accessible to him, yet I want the visual referencing those measures to work for him when he wants to view the report from service (the view is fully accessible cause RLS allows him).
To summarize, is it possible that John can't access the measure table (blocked in OLS) yet can fully view the report (referencing measures from Measure table) on the server without any issue (mapped in RLS) ?
As a workaround I used to duplicate the measure and give it the same name adding Copy at the end, and in the roles I created a role that has access to the duplicate measure. Try to ssign the role to John and edit the visuals using the old measure and replace it by the duplicate one.
When John views the report, he will only see the data that he is authorized to see based on his role, but he will also be able to see the visual that uses the duplicate measure.
5 Replies
Yes, it is possible to create an OLS (Object-Level Security) role on a Measure table and not assign that role to a user, so that the Measure table is not accessible to that user. However, if the user is not able to access the Measure table, they may not be able to see the measures that are being referenced in the report.
If you want to allow the user to view the report while restricting their access to the Measure table, you can use RLS to filter the data based on the user's permissions : he will only be able to see the data that they are authorized to view based on their role or other criteria specified in the RLS rules.
AmiraBedh Thanks !!!
"If you want to allow the user to view the report while restricting their access to the Measure table, you can use RLS to filter the data based on the user's permissions" - if I do this, John can still access Measure table (the objects would still be visible)..can you pls confirm ?
If you want to prevent John from accessing the Measure table and its objects, you can use OLS (Object-Level Security) to deny him access to the table, so he won't be able to access it otherwise no.
