Forum Discussion

porterm3's avatar
porterm3
Frequent Visitor
4 years ago
Solved

Link Sharing with Row Level Security

I noticed that when RLS is implemented and a link is sent to someone via subscription, RLS does not work on the first view, and the user can see everything.  Upon refreshing or clicking the link agai...
Data Protection
Need Help
  • porterm3's avatar
    porterm3
    4 years ago

    Just checking back in with the solution on this.

     

    It turns out that we believe the users who reported the issue were actually seeing what they were supposed to see and just didn't realize it.

     

    The reason the issue persisted in our internal testing is because we were removing people from the workspace just before assigning RLS and testing.  We met with our Microsoft reps on this and it turns out that you need to wait at least 1 hour after removing someone from a workspace before assigning RLS.  This has to do with a permissions job that runs hourly.

     

    Thanks everyone for your help.

GilbertQ's avatar
GilbertQ
Super User
4 years ago

HI porterm3 

 

This sometimes happens if the report is cached.

 

What I typically do is to share reports via an App. Because the user clicks on the app link it will then first see their RLS permissions and then show them the valid data.

porterm3's avatar
porterm3
Frequent Visitor
4 years ago

So I tried the app approach and we still had a test this morning where a user saw everything and then upon refresh, RLS kicked in.  Any thoughts GilbertQ ?

  • GilbertQ's avatar
    GilbertQ
    Super User
    4 years ago

    Hi porterm3 

     

    The only thing I can think of is if there is some caching happening on your network for this to happen.


    When I do this with my internet connection I do not see this happening.