RLS management could be greatly enhanced and eased if multiple roles could be combined (choosing logical functions like AND, OR, NOT, XOR or set operations like UNION, INTERSECT, COMPLEMENT) for one user.
3 Comments
- Having multiple roles will also mean that refining access to the user can be achieved through the selection of the correct roles, rather than having to generate multiple roles for each combination.
- I am fully with you. For me it's either point a - roles that can be "additive" or user - selected.
This way no of combinations can be greatly reduced in the "dynamic RLS" approach and users are at least able to decide which scope they want to work in. "selectable" roles might be easier to build, as currently PBI does not allow for a user to be part of more than 1 role.
- Status added:Needs Votes
