Skip to content

Commit 908a64f

Browse files
github-automation-metabaseMetabase Docs bot
andauthored
[auto] adding content to manual-backport-of-docs->release-x.56.x (#396)
Co-authored-by: Metabase Docs bot <[email protected]>
1 parent 4a5251f commit 908a64f

File tree

4 files changed

+14
-14
lines changed

4 files changed

+14
-14
lines changed
-111 KB
Loading

_docs/v0.56/permissions/row-and-column-security.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ redirect_from:
1616

1717
{% include plans-blockquote.html feature="Row and column security" %}
1818

19-
Row and column security lets you give granular permissions to rows and columns for different groups of people. You can change what data a group [can view](./data#can-view-data-permission), as well as what data a group [can query](./data#create-queries-permissions) with the query builder.
19+
Row and column security lets you give granular permissions for different groups of people. You can change what data a group [can view](./data#can-view-data-permission), as well as what data a group [can query](./data#create-queries-permissions) with the query builder.
2020

2121
You can use row and column security to set up [self-service analytics](/learn/metabase-basics/embedding/multi-tenant-self-service-analytics), so that each of your customers can only view the rows that match their customer ID. For example, if you have an Accounts table with information about your customers, you can add permissions to the table so that each customer only sees the data relevant to them.
2222

@@ -38,7 +38,7 @@ You can define up to one row and column security policy for each table/group com
3838
Row and column security show specific data to each person based on their [user attributes](../people-and-groups/managing#adding-a-user-attribute). You can:
3939

4040
- [Restrict **rows**](#row-level-security-filter-by-a-column-in-the-table)
41-
- [Restrict **columns**](#custom-row-and-column-security-use-a-saved-question-to-create-a-custom-view-of-a-table) (as well as rows) for specific people.
41+
- [Restrict **columns** and rows](#custom-row-and-column-security-use-a-saved-question-to-create-a-custom-view-of-a-table) for specific people.
4242

4343
| Goal | Row (filter by a column in the table) | Custom (use a saved SQL question) |
4444
| ---------------------------------------------- | ------------------------------------- | --------------------------------- |
@@ -56,9 +56,9 @@ For example, you can filter the Accounts table for a group so that:
5656
- A person with the user attribute value "Basic" will see rows where `Plan = "Basic"` (rows where the Plan column matches the value "Basic").
5757
- A person with the user attribute value "Premium" will see the rows where `Plan = "Premium"` (rows where the Plan column matches the value "Premium").
5858

59-
### Custom row and column security: use a saved question to create a custom "view" of a table
59+
### Custom row and column security: use a SQL question to create a custom "view" of a table
6060

61-
To **restrict rows _and_ columns**, you can use a saved question to filter the table. When someone views that table, they'll instead see the question's results, not the raw table.
61+
To **restrict rows _and_ columns**, you can use a SQL question to filter the table. When someone views that table, they'll instead see the question's results, not the raw table.
6262

6363
For example, say your original Accounts table includes the columns: `ID`, `Email`, `Plan`, and `Created At`. If you want to hide the Email column, you can create a "Restricted Accounts" SQL question with the columns: `ID`, `Plan`, and `Created At`.
6464

@@ -75,7 +75,7 @@ You can use a question to filter tables to:
7575

7676
Row security displays a filtered table, in place of an original table, to a specific group. How Metabase filters that table depends on the value in each person's user attribute.
7777

78-
For example, you can set up a row security so that:
78+
For example, you can set up a row-level security so that:
7979

8080
- Someone with the user attribute with key of "plan" and a value of "Basic" will see a version of the Accounts table with a filter for `Plan = "Basic"` (that is, only the rows where the Plan column matches the value "Basic").
8181
- Someone with a "plan" user attribute set to "Premium" will see a different version of the Accounts table with the filter `Plan = "Premium"` applied.
@@ -244,7 +244,7 @@ To prevent the Email column from being exposed via a SQL question:
244244

245245
### Public sharing
246246

247-
Row and column security permissions don't apply to public questions or public dashboards. If somone in an unsecured group person creates a public link using an original table, the original table will be displayed to anyone who has the public link URL.
247+
Row and column security permissions don't apply to public questions or public dashboards. If somone in an unsecured group creates a public link using an original table, the original table will be displayed to anyone who has the public link URL.
248248

249249
To prevent this from happening, you'll have to [disable public sharing](../embedding/public-links) for your Metabase.
250250

@@ -256,7 +256,7 @@ Row and column security is limited to questions built with the [query builder](.
256256

257257
### Groups with native query permissions (access to the SQL editor) can bypass row and column security
258258

259-
You can't set up [query builder and native](./data#create-queries-permissions) for groups with row and column security.
259+
You can't set up [native query persmissons](./data#create-queries-permissions) for groups with row and column security.
260260

261261
To enforce row-level permissions with the native query editor, check out [impersonation](./impersonation).
262262

-111 KB
Loading

_site/docs/v0.56/permissions/row-and-column-security.html

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4861,7 +4861,7 @@ <h1 id="row-and-column-security">Row and column security</h1>
48614861
</div>
48624862
</div>
48634863

4864-
<p>Row and column security lets you give granular permissions to rows and columns for different groups of people. You can change what data a group <a href="./data#can-view-data-permission">can view</a>, as well as what data a group <a href="./data#create-queries-permissions">can query</a> with the query builder.</p>
4864+
<p>Row and column security lets you give granular permissions for different groups of people. You can change what data a group <a href="./data#can-view-data-permission">can view</a>, as well as what data a group <a href="./data#create-queries-permissions">can query</a> with the query builder.</p>
48654865

48664866
<p>You can use row and column security to set up <a href="/learn/metabase-basics/embedding/multi-tenant-self-service-analytics">self-service analytics</a>, so that each of your customers can only view the rows that match their customer ID. For example, if you have an Accounts table with information about your customers, you can add permissions to the table so that each customer only sees the data relevant to them.</p>
48674867

@@ -4886,7 +4886,7 @@ <h2 id="types-of-row-and-column-security">Types of row and column security</h2>
48864886

48874887
<ul>
48884888
<li><a href="#row-level-security-filter-by-a-column-in-the-table">Restrict <strong>rows</strong></a></li>
4889-
<li><a href="#custom-row-and-column-security-use-a-saved-question-to-create-a-custom-view-of-a-table">Restrict <strong>columns</strong></a> (as well as rows) for specific people.</li>
4889+
<li><a href="#custom-row-and-column-security-use-a-saved-question-to-create-a-custom-view-of-a-table">Restrict <strong>columns</strong> and rows</a> for specific people.</li>
48904890
</ul>
48914891

48924892
<table>
@@ -4932,9 +4932,9 @@ <h3 id="row-level-security-filter-by-a-column-in-the-table">Row-level security:
49324932
<li>A person with the user attribute value “Premium” will see the rows where <code class="language-plaintext highlighter-rouge">Plan = "Premium"</code> (rows where the Plan column matches the value “Premium”).</li>
49334933
</ul>
49344934

4935-
<h3 id="custom-row-and-column-security-use-a-saved-question-to-create-a-custom-view-of-a-table">Custom row and column security: use a saved question to create a custom “view” of a table</h3>
4935+
<h3 id="custom-row-and-column-security-use-a-sql-question-to-create-a-custom-view-of-a-table">Custom row and column security: use a SQL question to create a custom “view” of a table</h3>
49364936

4937-
<p>To <strong>restrict rows <em>and</em> columns</strong>, you can use a saved question to filter the table. When someone views that table, they’ll instead see the question’s results, not the raw table.</p>
4937+
<p>To <strong>restrict rows <em>and</em> columns</strong>, you can use a SQL question to filter the table. When someone views that table, they’ll instead see the question’s results, not the raw table.</p>
49384938

49394939
<p>For example, say your original Accounts table includes the columns: <code class="language-plaintext highlighter-rouge">ID</code>, <code class="language-plaintext highlighter-rouge">Email</code>, <code class="language-plaintext highlighter-rouge">Plan</code>, and <code class="language-plaintext highlighter-rouge">Created At</code>. If you want to hide the Email column, you can create a “Restricted Accounts” SQL question with the columns: <code class="language-plaintext highlighter-rouge">ID</code>, <code class="language-plaintext highlighter-rouge">Plan</code>, and <code class="language-plaintext highlighter-rouge">Created At</code>.</p>
49404940

@@ -4955,7 +4955,7 @@ <h2 id="prerequisites-for-row-security">Prerequisites for row security</h2>
49554955

49564956
<p>Row security displays a filtered table, in place of an original table, to a specific group. How Metabase filters that table depends on the value in each person’s user attribute.</p>
49574957

4958-
<p>For example, you can set up a row security so that:</p>
4958+
<p>For example, you can set up a row-level security so that:</p>
49594959

49604960
<ul>
49614961
<li>Someone with the user attribute with key of “plan” and a value of “Basic” will see a version of the Accounts table with a filter for <code class="language-plaintext highlighter-rouge">Plan = "Basic"</code> (that is, only the rows where the Plan column matches the value “Basic”).</li>
@@ -5149,7 +5149,7 @@ <h3 id="you-cannot-secure-the-rows-or-columns-of-sql-results">You cannot secure
51495149

51505150
<h3 id="public-sharing">Public sharing</h3>
51515151

5152-
<p>Row and column security permissions don’t apply to public questions or public dashboards. If somone in an unsecured group person creates a public link using an original table, the original table will be displayed to anyone who has the public link URL.</p>
5152+
<p>Row and column security permissions don’t apply to public questions or public dashboards. If somone in an unsecured group creates a public link using an original table, the original table will be displayed to anyone who has the public link URL.</p>
51535153

51545154
<p>To prevent this from happening, you’ll have to <a href="../embedding/public-links">disable public sharing</a> for your Metabase.</p>
51555155

@@ -5161,7 +5161,7 @@ <h2 id="limitations">Limitations</h2>
51615161

51625162
<h3 id="groups-with-native-query-permissions-access-to-the-sql-editor-can-bypass-row-and-column-security">Groups with native query permissions (access to the SQL editor) can bypass row and column security</h3>
51635163

5164-
<p>You can’t set up <a href="./data#create-queries-permissions">query builder and native</a> for groups with row and column security.</p>
5164+
<p>You can’t set up <a href="./data#create-queries-permissions">native query persmissons</a> for groups with row and column security.</p>
51655165

51665166
<p>To enforce row-level permissions with the native query editor, check out <a href="./impersonation">impersonation</a>.</p>
51675167

0 commit comments

Comments
 (0)