Forum Discussion

thebigwhite's avatar
thebigwhite
Icon for Helper II rankHelper II
6 years ago
Solved

Is it possbile that a specif user can bypass the RLS security?

We are facing a particular case with an User that even he is assigned to a specific role and is set as "Viewer" seems to by pass the security role.  It's extremely curious cause with all other users...
data protection
Need Help
  • thebigwhite's avatar
    thebigwhite
    6 years ago

    We have republished  the report and re-inserted the user on the workspace.

    Now the security is working fine.

    I think our supplier had fixed the role which likely was not working correctly.

     

    Thanks for your help

     

Anonymous's avatar
Anonymous
Not applicable
6 years ago

HI thebigwhite,

I'd like to suggest you check this account to confirm he only has 'read' permission of the related dataset, or the RLS filter effect will be ignored.
Regards,

Xiaoxin Sheng

thebigwhite's avatar
thebigwhite
Icon for Helper II rankHelper II
6 years ago

The account has got only viewer permission and the dataset is not linked to Analysis services (just dataflow).

 

  • Anonymous's avatar
    Anonymous
    Not applicable
    6 years ago

    HI thebigwhite,

    Did this user has global admin permission of a group of specific workspaces? How did you RLS configure, have you enabled UPN on this user that mapping this user to other accounts? (if RLS is based on the user mapping table, please also take a look on it to confirm if anything specific on that user)

    Regards,

    Xiaoxin Sheng

    • thebigwhite's avatar
      thebigwhite
      Icon for Helper II rankHelper II
      6 years ago

      We have republished  the report and re-inserted the user on the workspace.

      Now the security is working fine.

      I think our supplier had fixed the role which likely was not working correctly.

       

      Thanks for your help

       

      • Rajnish366's avatar
        Rajnish366
        Frequent Visitor
        1 year ago

        I am also facing similar issue. one of my user is by-passing RLS applied. User has only viewer access and is not a part on admin/contibutor/member of workspace. 
        Also in My model i have a bi-directional many to 1 relationship with 'Applied security at both side'. is this may a possible reason? if yes then why only for a single user?
        Can someone suggest?