Forum Discussion
Show restricted Data on filter panel
Hi all,
I encounter the following issue : I have a report with RLS on a dimension, and it works well, but when users open the filter pane, they still see all the values when looking at the dimension in it.
Of course, if they select a value other than the one that they have access to with the RLS, they don't see anything in the visuals, but it is problematic.
Is there a way to change this, so that the users can only see the values they have access to when looking at the dimension in the filter pane ?
Best regards.
Do you have a proper relationship configured between the main table with RLS and the Dimension1 table?
In my environment this is working as intended, users can only filter to records they have access to, they can't see other records in the filter pane.
One workaround that comes to mind is can you remove the filter pane and add a slicer to the report itself, that should get around this, but I'd love to get to the bottom of what is actually happening.
If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.
5 Replies
Hi Eric93
This is very interesting. I'm not seeing this in my environment.
THis would be a major security concern, so I tested it in a report of mine with RLS enabled at the semantic model layer.
Are you able to share more details for how this is happening?
How is RLS configured?
If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.
Hi,
Thank you for your answer.
The RLS is simple : on the main table, we have various RLS roles with Dimension1 = Value
Then, we have users in the different roles.
What happens is that the users only see their data in the report (so RLS works), but they can still see all the values of Dimension1 when they see Dimension1 in the Filter Pane.
If they select a value of Dimension1 that is different from the one of their RLS role, they only see empty visuals, so no immediate security concern, but it would be better if they could only see the value of their RLS role when checking Dimension1 in the Filter Pane.
Best regards.
Do you have a proper relationship configured between the main table with RLS and the Dimension1 table?
In my environment this is working as intended, users can only filter to records they have access to, they can't see other records in the filter pane.
One workaround that comes to mind is can you remove the filter pane and add a slicer to the report itself, that should get around this, but I'd love to get to the bottom of what is actually happening.
If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.
