PDP issues

MayaU_01
MayaU_01 Member
in Other Ideas

In domo, I have two different datasets, we have PDP policies on both of the datasets.

I have created two views on both of the datasets and then joined the views in a new view. I have not enabled PDP on this new view neither on other views. It should inherit the pdp from base datasets, however users are still facing issue.

What should i do to make sure that the view inherits pdp policies from base datasets.

Tagged:
1
Up
1 votes

Submitted and awaiting review from product team · Last Updated

Comments

  • DomoDork
    DomoDork Contributor

    @MayaU_01 - I've seen this behavior before as well and I think it has to do with how views interpret PDP in scenarios where you have two datasets, views on those datasets and then combining said views into a final view.

    For example, if Dataset 1 has a PDP policy restricting data by 'Department', but dataset 2 has a policy restricting the same user by 'Region', then when the views come together in your final view, it's not actually checking the final view and then applying the filter on that final data in the view.

    Instead the first view is returning rows based on PDP for the department, and the second view is returning rows based on PDP by region before the join happens to bring them together in the final view. The result of that can be a join that now has missing data and can result in weird results, no rows being returned etc.

    Best practice is to make sure the PDP policies are the same across both base datasets if you are going to use views on top of views, or use a magic ETL to bring the views together and then apply PDP on that output dataset.

Categories