RLS being ignored when showing items with no data

[Veles]

I've setup a RLS role that has two filters. I'm filtering out a particular category from a dimension table and all of the associated values from a fact table.

When I switch to the role, I can see that in the table view, the relevant rows on the dimension and fact tables are gone.

I have a visual that has "Show items with no data" selected on the dimension. When I switch to the role, the dimension is still visible in the visualbut it correctly shows no value against it.

Even though I have explicitly stated that this role should not see this dimension, it seems to be able to see it anyway when set to show items with no data.

[v-yulgu-msft]

Hi @Veles,

I was not able to reproduce this scenario. Please provide more detailed description so taht I can replicate on my side. It would be better that you could post sample data and the screenshot of current resut you get.

Regards,

Yuliana Gu

[TomMartens]

Hey,

I'm not sure what you mean by "... stated that this role should not see the the dimension ..."

Basically you "just" reduce the rows of a certain table the role can access. If your DAX statement that you use to "restrict" access in such a way that there are no remaining rows. This effect is reflected by your observation

"... the relevant rows ... are gone"

The role you can configure in Power BI Desktop does not apply a security context to an object like a table, for this reason the "dimension" (a table) is still visible. Object level security is currently just available in Azure Analysis Services or on prem, unless you use the compatibility level 1400 (on-premises SSAS 2017 is needed): https://docs.microsoft.com/en-us/sql/analysis-services/tabular-models/object-level-security?view=sql...

Hopefully this answers your question.

Regards

Tom