Skip to main content

Power BI

Needs Votes

Change the fact that workspace App updates cause restore of reshare permissions for underlying datrasets

Vote (46) Share
's profile image

on 04 Oct 2019 13:41:24

After a workspace App being updated, the reshare permissions are restored for a dataset, despite having these been previously removed. This behaviour supposes a security risk as it limits control on users resharing reports.

Comments (7)
's profile image Profile Picture

Nachiket Kamat on 15 Apr 2023 02:31:19

RE: Change the fact that workspace App updates cause restore of reshare permissions for underlying datrasets

What's confusing me is that -1. When publishing the app (added User1 to the list), I haven't checkmarked the `Allow people to share the datasets in this app` checkbox2. After publishing the app, under dataset permissions I can't see User1 having reshare. It just shows as App(Build). Yet User1 is able to share their own reports created using this dataset with User2, and User2 cam view the report without been given any permission to the dataset3. User2 never shows up under dataset permissionCan this be looked into?

's profile image Profile Picture

Nachiket Kamat on 15 Apr 2023 02:20:52

RE: Change the fact that workspace App updates cause restore of reshare permissions for underlying datrasets

Guys can you give this a try (https://community.powerbi.com/t5/Service/App-build-permission-allows-user-to-share-report-with-user-that/td-p/3189320).It looks like the audience inherently gets reshare permission to the dataset, and can share report with another user who has no access to the dataset.

's profile image Profile Picture

Mary Culpepper on 17 Aug 2022 18:20:45

RE: Change the fact that workspace App updates cause restore of reshare permissions for underlying datrasets

This is a security risk. Please fix.

's profile image Profile Picture

Karin on 06 Jul 2020 00:07:42

RE: Change the fact that workspace App updates cause restore of reshare permissions for underlying datrasets

Any news on this?
If anyone has seen differences regarding this issue between the "classic" and "new" workspaces, pls comment (I don't see any difference, but I hope I might have just missed something).

's profile image Profile Picture

Todd Chittenden on 06 Jul 2020 00:05:03

RE: Change the fact that workspace App updates cause restore of reshare permissions for underlying datrasets

I really struggle with this being "by design"! I also saw in this forum thread https://community.powerbi.com/t5/Service/quot-App-Reshare-quot-permissions-keep-coming-back/m-p/810231#M77748 that this is a NEW issue, that is was NOT happening previously.
Therefore, MS CHANGED the design specs !?!

IMHO this should be reported as a SECURITY BUG and fixed ASAP.

's profile image Profile Picture

Andy Waldman on 06 Jul 2020 00:00:12

RE: Change the fact that workspace App updates cause restore of reshare permissions for underlying datrasets

Agreed. This is a real hassle and a security risk since it impacts RLS and exporting data.

's profile image Profile Picture

Power BI User on 06 Jul 2020 00:00:10

RE: Change the fact that workspace App updates cause restore of reshare permissions for underlying datrasets

I do agree with this comment. Thank you for taking it into account.