RLS and App

Hi Peter_23 

It’s important to understand that there is no direct link between RLS (Row-Level Security) and App Audience settings because one controls row filtering, while the other determines which reports or pages are visible in the app.

RLS is designed to filter data based on user permissions, meaning users will only see the rows they are authorized to view within the report. On the other hand, App Audience settings control which reports or pages users can access in the app.

Both mechanisms operate independently:

• RLS filters the content within the report based on permissions.
• App Audience manages access to specific reports or pages within the app.

To ensure everything is working as expected, here are the checks you should perform:

1. Workspace Access: If the test group has access to the workspace, they will be able to see all reports, regardless of the app audience settings. Make sure the test group does not have direct workspace access, and only access the reports through the app.

2. App Audience Settings: Ensure that the test group is correctly configured in the audience that can only see the "Country" report and not the "State" report. Audiences must be accurately defined to prevent access to restricted content.

3. RLS Validation: Verify that RLS is properly configured on both reports, and that the test group is filtered correctly for each report so that users only see the data they are permitted to view.

   If this post helps, then please consider Accepting it as the solution to help the other members find it more quickly