App(build) permission allows user to share report with user that doesn't have any dataset permission

[nach_pbi]

I have a user (say User1) that doesn't have any workspace level permissions.

When I publish an app, add the User1 into the Audience, and checkmark the `Allow people to build content with the datasets in this app audience` (this is on the final page when publishing an app, I have NOT checkmarked the share dataset checkbox), then that user (User1) is able to create their own reports (that points to this dataset) and share their report with another user (User2). User2 is able to open the report even though User2 doesn't have any permission on the dataset (or workspace). Is this a bug?

For example: If I don't checkmark the above option, but give User1 `build` permission on the dataset, then the User1 is able to create own report (that points to this dataset), and when User1 shares their report with User2, then, User2 gets access denied. This is as expected.

Is App (build) different to the normal dataset build permission?

[nach_pbi]

As I have mentioned, I have only checkmarked `Allow people to build content with the datasets in this app audience`.

[bcdobbs]

Hi,

As well as tick box for build permissions I think there is a tick box that allows users to share the dataset:

https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-create-distribute-apps