Forum Discussion

Cihan61's avatar
Cihan61
Frequent Visitor
3 years ago

RLS And authorizations

Hello all,   we have the following problem in our company: We don't want certain AD groups to have access to a dashboard. I have prepared and uploaded the authorization tables in the desktop versi...
Need Help
Tutu_in_YYC's avatar
Tutu_in_YYC
Super User
3 years ago

Assuming when you tested in both workspaces, they are individual datasets ( i.e not shared dataset between workspace).

If it works in Workspace Operations, but doesnt in Workspace Crew. It could be the person e.g Adam, has been assigned with a different role in a different way.

Example
In Workspace Operations, you have these members:

1. Ops_Readers - Assigned as Viewer - contains Adam

2. Adam - Assigned as Member

3. SecurityGroup2 - Assigned as Member - contains Adam


(2) or (3) will bypass RLS, and Adam will see all data.

Cihan61's avatar
Cihan61
Frequent Visitor
3 years ago

thanks 🙂 But ....

 

Workspace Operations we have followings Security Groups:

OPS_Readers (Viewer) > Contains Adam

OPS_PowerUsers (Admin) > Without Adam

 

Workspace Crew we have followings Security Groups:

Crew_Readers (Viewer) > Contains Adam

Crew_PowerUsers (Admin) > Without Adam

 

There are no other security groups. 

  • Tutu_in_YYC's avatar
    Tutu_in_YYC
    Super User
    3 years ago

    Same report and dataset in both workspaces? As otravers mentioned, what did you use for the RLS DAX syntax?

    • Cihan61's avatar
      Cihan61
      Frequent Visitor
      3 years ago

      i have a file that i have saved locally and i load this file in two different workspaces. In that case we would have two different datasets in two different workspaces, right? But if I delete one of them in a workspace, the same thing happens.

      The Dax formula is the following:

       

       

      I am not sure if it is really due to the Dax formula. When I test it on the desktop version, it works fine. I enter the email address of the person and it works.

       

      • Tutu_in_YYC's avatar
        Tutu_in_YYC
        Super User
        3 years ago

        Yeah the DAX looks fine. It has to be some overlap of roles. Just to confirm there are only 2 members in each workspace and they are the security groups, no other members in there?

         

         

        Cihan61 wrote:

        Workspace Operations we have followings Security Groups:

        OPS_Readers (Viewer) > Contains Adam

        OPS_PowerUsers (Admin) > Without Adam

         

        Workspace Crew we have followings Security Groups:

        Crew_Readers (Viewer) > Contains Adam

        Crew_PowerUsers (Admin) > Without Adam

        If yes, this is a doozy...