Forum Discussion

Cihan61's avatar
Cihan61
Frequent Visitor
3 years ago

RLS And authorizations

Hello all,   we have the following problem in our company: We don't want certain AD groups to have access to a dashboard. I have prepared and uploaded the authorization tables in the desktop versi...
Need Help
Cihan61's avatar
Cihan61
Frequent Visitor
3 years ago

Hey Tutu_in_YYC,

 

we have two workspaces. Different viewer security groups have been created for both workspaces.

 

Workspace Crew > Crew_Readers
Workspace Operations > Ops_Readers

 

The person is in both view security groups. While it works in Workspace Operations, it does not work in Workspace Crew. But strange is also that some people Workspace Crew despite Crew_readers authorization, can not see the data (as it should be).

Tutu_in_YYC's avatar
Tutu_in_YYC
Super User
3 years ago

Assuming when you tested in both workspaces, they are individual datasets ( i.e not shared dataset between workspace).

If it works in Workspace Operations, but doesnt in Workspace Crew. It could be the person e.g Adam, has been assigned with a different role in a different way.

Example
In Workspace Operations, you have these members:

1. Ops_Readers - Assigned as Viewer - contains Adam

2. Adam - Assigned as Member

3. SecurityGroup2 - Assigned as Member - contains Adam


(2) or (3) will bypass RLS, and Adam will see all data.