Forum Discussion

andyor's avatar
andyor
Icon for Resolver I rankResolver I
5 years ago

User access to workspace reports

Hi

 

I have set up a list of users within my company to be either View or Member access. However, other users within the company domain can still access the report just if they have the URL (e.g. we have a generic customerservice account that isn't on the list). Users on the list are sometimes logged into the cutomerservice account automatically and can still view the report as normal. How do I fix this?

 

Thanks

6 Replies

    • andyor's avatar
      andyor
      Icon for Resolver I rankResolver I

      I'm on a pro account. Everybody else just has regular accounts

  • Remove the member access (make everybody viewer) and implement RLS for extra data protection.

    • andyor's avatar
      andyor
      Icon for Resolver I rankResolver I

      I can look into this. But I think the original question remains unanswered and opens another one

       

      Why would I make everyone viewer - how does this help with solving the problem of users who I didn't grant either Member or View access to in my company being able to view the report?

       

      Original Q - Why are users who I have not granted either Member or Viewer access to able to view the report? Am I missing any steps or does this function just not work?

       

      Other email addresses that are logged in other than these can just view the report, the same as those on the list. 

       

       

       

  • When I said "everyone"  i meant "everyone who should have access.

     

    Be aware that you have workspace access AND you have dataset access.  Clean that out too. Avoid giving reshare permissions.

    • andyor's avatar
      andyor
      Icon for Resolver I rankResolver I

      I knew you meant everyone who should have access. 

       

      I haven't given reshare permissions to anybody. Random users in my organisation can just access the report once they go to the URL. Access was given at the workspace level to only a select few people. Therefore I shouldn't have to restrict dataset access surely, or what's the point of workspace access in the first place...

       

      I appreciate your effort but I don't think you're going to be able to help me. The question remains open and the specific quetions asked remain unaddresesed/unanswered