Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

explore access should be > than metrics layer #6559

Open
royendo opened this issue Jan 31, 2025 · 0 comments
Open

explore access should be > than metrics layer #6559

royendo opened this issue Jan 31, 2025 · 0 comments
Assignees
Labels
Type:Bug Something isn't working

Comments

@royendo
Copy link
Contributor

royendo commented Jan 31, 2025

Describe the bug
If metrics layer is:

security:
  access: true
  row_filter: > 
        customer_domain = '{{ .user.domain }}' or {{ .user.admin }} 
  exclude:
    - if: "'{{.user.domain}}' != 'rilldata.com'"
      names:
        - transaction_id
        - sales_rep_email
        - sales_rep_domain
        - sales_team
        - internal_flag
        - sensitive_flag

and explore is

security:
  access: "{{ .user.admin }} OR '{{ .user.domain }}' == 'rilldata.com'"

I would expect that explore dashboard would take the higher level of permissions and remove the dashboard however, that is not the case.

To Reproduce
Steps to reproduce the behavior:

  1. Set up metrics and explore as above
  2. Test with a user that is not admin or rilldata.com
  3. see that metrics view gets applied

Expected behavior
The explore should be restricted on the access policy for dashboard.
Use case is that im using the same metrics in a demo project to demonstrate metrics level permissions and explore and found that even setting explore level access is ignored. Will create unique metrics and explore as a workaround

Screenshots
Image

@royendo royendo added the Type:Bug Something isn't working label Jan 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type:Bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants