Administration
...
Solutions
Row Level Security

Data policies

5min

Data policies are set per solution and table, with restrictions set per operation.

Permissions

  1. Only the solution Owner can configure data policies on the solution tables. See Permissions - User Roles for more information.
  2. As the solution Owner you can disable the data policy on a solution level using the Policy Checks Active switch at the top right of the screen. This will ignore all restrictions set in the table.

Operations

The following operations are available on each table:

  • CREATE - the ability to create new records in the table
  • READ - the operation allows users to read or list the records in a table
  • UPDATE - the ability to update existing records in a table
  • DELETE - allows records to be deleted from the table

Restrictions

The following restrictions are configurable on each operation, or you can set the restriction on the solution level which is applied to app operations:

  • Custom - configure which groups, owners, or members can perform an operation
  • Allow everyone - grants all users of the solution rights to perform an operation
  • Deny all - prevents all users of the solution from performing an operation

Considerations

  • Setting the Deny all restriction on the table level will remove all the operations from the list below. Caution must be used when using this restriction as it can create a complete lock on the table.
  • Important - In a custom restriction data policy, if you add a group to Members, all users in that group can see all records in the table.
  • Setting the Policy Checks Active to disabled removes all restrictions, giving all users access to the data.

Configuring data policies

Data Policy configuration
Data Policy configuration

  1. Open
    
    , select the solution option and browse to the solution you want to set the data policy on.
  2. Click on the Data Policies option in the navigation pane.
  3. Select the required table from the Tables list in the right-hand pane.
  4. To apply a restriction for all operations on the table, use the Restrictions field under the table name. Select the required restriction from the dropdown list.
  5. To apply a restriction per operation, click on the operation in the list to open the configuration pane on the right.
  6. Select the required restriction from the dropdown list and click Save.
  7. Selecting the Custom restriction requires selecting specific groups, owners, and members.