Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
6 years ago

RLS Not Working Properly?

Hi all,   I created RLS in a report that I built. Let's say I want to restrict the data based on project. I created a role called RLS-ProjectX, which has definition of [Project] = "X", then deplo...
Report Server
RLS
Anonymous's avatar
Anonymous
Not applicable
6 years ago
d_gosbell wrote:

Yes it is meant to work like this. If User A is a member of both RLS-ProjectX and RLS-ProjectALL the list of available projects which the user can see is generated by unioning the list of projects from each role so UserA will see all projects. The solution is to not include User A in the membership for the RLS-ProjectALL role.

 

Is there an easy way to assign everyone except User A in the RLS-ProjectALL group?

It's not practical to include users one by one..

d_gosbell's avatar
d_gosbell
Super User
6 years ago
Anonymous wrote:

Is there an easy way to assign everyone except User A in the RLS-ProjectALL group?

Not really. We usually use AD Groups in our role membership rather than adding individual users. But you still have the problem then of creating a group without that one person in it. You could also use Powershell or some other scripting approach to either populate a group or the role membership