Row level security / access

Hi, I have a table to register Projects. Not every user has to see all projects. So i want to filter rows for specifiek users, based on the value of a field (=all records where organisation = A or B or C).
I can manage access of users to a table. But is it also possible to filter on rows

Hey there,

We just released Role Based Access control for our enterprise offering that allows you to define more granular access control.

For the time being you are only able to restrict on workspace, database and table level what role a user has, but we do plan on potentially going even more granular to field/row level in the future.

2 Likes

Hi there, with the upcoming release of view-level permissions in version 2.2, is there a plan to develop row-level access rules in order to reach a complete RBAC solution?

Having view-level permissions is great, especially if we can make a filtered view where everyone only sees the rows linked to them, i.e. filter where [lookup row that returns collaborators]=[current collaborator].

However, even on such a controlled & filtered table view, there are still some issues I see:

  1. Being able to navigate to “restricted” rows through a Link to table field. I.e. if I’m in Team A and only supposed to see Team-A related rows, and a Team-A row (visible) links to a Team-B row (restricted). I could click on that Team-B row to open it up and see its information through that link.

  2. Bypassing collaborative-view-level permissions by creating a personal view without filters, showing rows from Team B.

This could perhaps be solved with row-level access rules that could be defined at the table-level.

In any case, thanks for your continued commitment working on Baserow.

Also, another source of leakage of “restricted-visibility” rows is forms.
In a form, when choosing a row in a Link to table field, you can see rows that should be restricted in the options you can choose from.

Hello @sila, let me check this with the team. :raised_hands:

1 Like

Hey @sila, firstly, view-level permissions are coming out next week or so, and you’ll be able to test them. In the meantime, here are answers to your questions:

No, that won’t be possible. You’ll be able to see them, but you won’t be able to click on or open the row.

That also won’t be possible.

You will see all the options, as this is how forms work, but you can already limit the selection:

Hope it helps!