Why add =FALSE() in RLS?

[Anonymous]

When working with Roles... If we leave the DAX Filter blank, it means that the user has no access, right?

I am opening this legacy cube, and I see the below:

what is the use of adding =FALSE()  isn't it the same, as just leaving it blank??

[mattww · Accepted solution]

Hi @Anonymous 

I believe RLS requires an expression to return a TRUE/FALSE value, so it would make sense for security that in the absense of an expression to evaluate, it defaults to FALSE preventing someone from accessing the data just because they have no role

Even though you might have left it blank in the past, I guess in the background it's forcing the value to FALSE

If this post helps then please consider Accept it as the solution to help the other members find it more quickly.

[mattww · Accepted solution]

If this post helps then please consider Accept it as the solution to help the other members find it more quickly.