Issue with summarized data export

[Janewhite]

• ISSUE WITH POWER BI

  I have a Power BI report that is embedded and about couple of end users use it.

  The issue is when a user wants to export their report and uses summarized data export, the export downloads the entire dataset.

  This SHOULD NOT be happening! It should only export the data they have access to as this is a security issue.

  When they use the default export, the RLS works and they only see their data. The issue is when they use summarized data export.

  How can I fix the issue to make sure when offices export their data, they only see their own information?

  I have 2 RLS being used for the tables.

  OR(
  CUSTOMDATA() = "hq@email.com",
  [location_ID] = LOOKUPVALUE(
  'USERlogin'[location_ID],
  'USERlogin'[EMAIL], CUSTOMDATA(),
  'USERlogin'[location_ID], 'Tablename'[location_ID]
  )
  )

  hq@email.com can see everything, but when a user login with their email, the RLS looks at what location they belong to and show them their data.

  For the user login table:

  OR(
  [location_ID] = LOOKUPVALUE(
  'USERlogin'[location_ID],
  'USERlogin'[EMAIL], CUSTOMDATA(),
  'USERlogin'[location_ID], 'USERlogin'[location_ID]
  ),
  CUSTOMDATA() = "hq@email.com"
  )

  On a daily basis, this works when a user login in the see their dashboard on the website, but the issue lies when they need to download their report. And this is causing major issues. Please can advice or tips will be much appreciated.

[GilbertQ]

Hi @Janewhite 

Does the user who is logging in have the permissions to download the PBIX file?

If it does then there is no way to limit this, as when downloading the PBIX it exports everything.

[Janewhite]

Hi @GilbertQ  no they are external users we can only login with their email and password and the RLS looks at that store location they are in and then show them their office report , after they can click on any report 

export data if they data with current layout no issue there when they download it but its when they click on summarized data they is when the RLS is ignoired and they can dowload everything 

we currently have it off but stores are asking to be able to down their report so we can look for ways to solve this issue