Tom on 28 May 2019 17:47:46
Current RLS implementation has a dependency on the security rule being applied in both directions. This requires a check-box to be selected when implementing the RLS. The issue this causes is that if, accidentally, this box isn't ticked RLS will not work, potentially exposing all data.
Please look at implementing a fail safe to ensure RLS is enabled on a report when published as intended or implement a way for it to fail safely. Currently, if RLS fails all data is exposed. Ideally, we would want no data to be exposed in the case of a failure.