Forum Discussion

TCavins's avatar
TCavins
Helper V
6 years ago
Solved

Row Level Security Only on Drillthrough

I have a single dataset that populates a bar chart based on groups. That bar chart then drills through to a details page to see each individual record.   How can I set up RLS so it limits only the ...
Need Help
  • TCavins's avatar
    TCavins
    6 years ago

    My solution:

     

    1) Import original dataset, call it XXX

    2) In modeling tab, create a new table and set it equal to my original dataset, call it XXX_Secure. (XXX_Secure = XXX)

    3) Create a relationship between XXX and XXX_Secure on group name.

    4) Configure Row Level Security on the USERPRINCIPALNAME on table Y.

    5) Create relationship from table Y to XXX_Security on the group name. 

    6) Create bar chart off of XXX

    7) Create drill through detail page, include all fields you need from XXX

    😎 Also add the group name from XXX_Secure to the detail page and minimize the column so it can't be seen.

     

    This will allow all users to see all the data in the bar chart regardless of group name. Every bar in the chart will have a drill through option, but clicking on them will return empty details except for the groups the person viewing the report has access to.

Pragati11's avatar
Pragati11
Super User
6 years ago

Hi TCavins ,

 

RLS is applied at a data-level. It has nothing to do with the tabs on your report.

It will apply filtering to the rows in youe dataset and further on the whole of your report, ir-respective of; if it is your main tab or your drill-through tab.

 

Thanks,

Pragati

 

Anonymous's avatar
Anonymous
Not applicable
6 years ago

Pragati11 Hit the nail on the head. 

 

The only thing I would add is, you can use the "View as" button to test RLS before publishing. This will allow you to test your roles to ensure they are working correctly.  

  • Pragati11's avatar
    Pragati11
    Super User
    6 years ago

    Hi Anonymous ,

     

    Thanks for endorsing me 🙂

     

    Thanks,

    Pragati

    • TCavins's avatar
      TCavins
      Helper V
      6 years ago

      My solution:

       

      1) Import original dataset, call it XXX

      2) In modeling tab, create a new table and set it equal to my original dataset, call it XXX_Secure. (XXX_Secure = XXX)

      3) Create a relationship between XXX and XXX_Secure on group name.

      4) Configure Row Level Security on the USERPRINCIPALNAME on table Y.

      5) Create relationship from table Y to XXX_Security on the group name. 

      6) Create bar chart off of XXX

      7) Create drill through detail page, include all fields you need from XXX

      😎 Also add the group name from XXX_Secure to the detail page and minimize the column so it can't be seen.

       

      This will allow all users to see all the data in the bar chart regardless of group name. Every bar in the chart will have a drill through option, but clicking on them will return empty details except for the groups the person viewing the report has access to.

      • Anonymous's avatar
        Anonymous
        Not applicable
        3 years ago

        I have a similar situation - trying to figure out what is Table Y - for the userprinciplaname().

        Thanks again!