Quantcast
Channel: Service topics
Viewing all articles
Browse latest Browse all 61926

Security Issues ? odc file connect may NOT limit by Row-level security

$
0
0

It's seems to security issue.

 

The odc file of 'Analyze of Excel' may not limit by Row-level security.

Please re-check.

 

Repro step.

1. Publish pbix from Power BI Desktop as User A.

2. Sign In to Power BI Service as User A.

3. Share a dashboard to User B from User A.

4. Select 'Security' of the dataset as User A.

5. Create a Row-level security setting of User B to limit the dataset.

6. Open Power BI Service by other browser as private mode.

7. Sign In to Power BI Server as User B.

8. Check that the shared dashboard limitted as User B.

9. Download the odc file by Analyze of Excel as User A.

10. Add 'User ID=UserB@xxx.com' in the odc file before </odc:ConnectionString>

11. Open the odc file by Excel 2016.

12. Sign In as User B to Azure Authentication.

13. Create a pivot table.

14. Check that the pivot table does not limit by Row-level security.

 

Does Row-level security affect to odc file connection from Excel ?

 

My environment:

OS: Windows 10 version 10.0.10586

Office: Office 365 ProPlus - Office 2016 x64 version 16.0.6769.2017

 

Regards,
Yoshihiro Kawabata.

 

 

 

 

 

 


Viewing all articles
Browse latest Browse all 61926

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>