Row Level Security

Ask for Help
1

Hi everyone,

Excited to be here. First of all my humble bow to all Glide team and fellow community members. This is an awesome tech that i plan to use for living :smiley:

Have been reading a lot of threads to accomplish what i need. Here’s something i have not found yet.

  1. Row Level Security: I need to have different usergroups who will be accessing the same spreadsheet where they populate the row data.

Use case:
John is From Team X
Alexa is from Team Y

I want John and Alexa to view only those row data which are related to their respective teams (i.e. X and Y respectively) but under no circumstances they should see data from other teams.

Is this currently possible? Or is this best implemented by maintaining a separate worsheets for each teams… if so, is there a way to block views at sheet levels for different user groups?

1 Like
2

Oh… i found this per user data

https://docs.glideapps.com/all/guides/intermediate-techniques/per-user-data

spoke to fast :yum: … have a lot to explore…

3

Once you have per user data set up, you can assign a team to each user, and use a relation to link that team member to a teams sheet. Change your users tab to Detail Style view and add an inline list that uses the relation you created. Each user will only see their own details and a list of items for their own team.

2 Likes
4

It’s important to note that filtering by email will not give you real data security. All data is still downloaded to the app, and only filtered in the app. Somebody who knows what they’re doing can open the app in a web browser and get to all the other user’s data.

We have been working on a feature to provide true row-level security, where the app can’t even download rows that the logged-in user doesn’t “own”. Let us know if you definitely need this feature and we can onboard you to the current early version.

To clear up potential misunderstandings: if your app has password or email whitelist authentication, then our security implementation will not allow anybody to download any of the data in your app unless they can actually log in.

4 Likes
5

Thanks Mark for your valuable input.

Yes, Row Level Security is a must as the data is very sensitive and cannot be accessible by the non-intended users.

Since i am a noob in this, i will try to explore all the features first and implement the work arounds to see if it really fits my requirement.

Also, i am so glad to learn you already have row level security planned. That proves, this product will go a long way into the commercial world.

1 Like
6

Thanks Jeff. Will follow your suggestion and all the work arounds to learn more about Glide.

1 Like
7

Yes please! The true row-level security option would be really welcomed.

8

Can an admin person view and edit all of these data? This feature will avoid having 2 apps: one for admin and one for other users.

9

That’s not what this feature is about. The owner of a row can view and - if the app allows editing - edit the row. A user who is not the owner of the row cannot see the row at all, let alone edit it.

10

You can if you are willing to provide a separate path to the sheet that only the administrator can get to. Check out the Admin View example in https://concepts.glideapp.io/ .

11

The problem of having the admin functionality within the app now is that you can only have one edit or add screen per sheet. So if you have some columns that you don’t want the “normal” user to edit but you do want the “admin” user to edit you have a problem when using one app instead of two.

1 Like