GitHub user Yash-alternativepath added a comment to the discussion: Seeking 
Some Help On DataSource Security / RLS

@dosu  I’ve observed something unusual. I’ve granted a user access to a 
specific dataset along with SQL Lab access, and I’ve also applied row-level 
security (RLS) for their user role on that dataset.

When the user runs a query without specifying the schema—e.g., SELECT * FROM 
table_x—the results are not filtered by RLS. However, when the same query is 
executed with the schema selected—e.g., SELECT * FROM table_x—the data is 
correctly filtered.

This seems like a potential issue. Is there a way to enforce schema usage to 
ensure RLS is consistently applied? and no data leak.

GitHub link: 
https://github.com/apache/superset/discussions/33308#discussioncomment-13007993

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: 
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to