I am currently testing RLS using a powerbi premium endpoint with the TX 6675.2 version.
Normally we use dynamic RLS, but since this did not work, for now i tried a manual setup:
I have added my user to a created Role
Then i have set the security setup and the endpoint to the Role i created.
The outcome in PowerBi Desktop when i connect to the PowerBI premium endpoint in the onelake datahun is that i don't see anything. No data at all. I would have expected that i would see the data for Bejo Andes Ltda.
Is this the correct setup for RLS in a PowerBI endpoint or am i missing something?
The rights are saved on the DW instance data area that is connected to the SSL instance. We found that it was empty even after executions. So this was a bug. We have a release with a fix I can send to you.
The guy who found it @KaiMueller also worked out a workaround.
we found a workaround: We deploy the SSL which creates the security table. We then create a view with the same name as the security table (and delete the security table). We can then deploy & execute the SSL as normal and TX uses the view (this seems a litle bit like a pssible security problem to me :)). This works for now, but is hard to maintain for a lot of security rules.
The rights are saved on the DW instance data area that is connected to the SSL instance. We found that it was empty even after executions. So this was a bug. We have a release with a fix I can send to you.
The guy who found it @KaiMueller also worked out a workaround.
we found a workaround: We deploy the SSL which creates the security table. We then create a view with the same name as the security table (and delete the security table). We can then deploy & execute the SSL as normal and TX uses the view (this seems a litle bit like a pssible security problem to me :)). This works for now, but is hard to maintain for a lot of security rules.
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.