I have a use case where we only want to show the children that’s assigned to a teacher based on class. To prevent all the children’s data from being downloaded to the teacher’s device, I use row owner on the Email column. I would like to check if this approach does prevent all students’ data from being downloaded to the teacher’s device, but only those students in his/her class based on the query?
Does the query shown in the image happen only AFTER the data is downloaded into the device, or before?
If you are only applying row owners to the admin table, and expecting it to carry down to the student table…that will not be the case. If you don’t have row owners on the student table, then all student data will be downloaded to the user’s device.
If you have assigned row owners to the student table to protect student data, and the current user is not an owner of those student rows (ie. the student rows are grayed out in the student table when viewing them from the data editor), the user will not have access to that data in any way, shape, or form. They cant see the data and the data will not be downloaded to their device. In their eyes, that student will not exist.
A Query does not bypass row owners, nor does it extend authority to other tables. A Query runs client side with only the data that has been downloaded and made available to the current user. Of row owners were not applied to the student table, then the query will look at ALL student data to find matches.
