Row owners - quick security question

[Darren_Murphy]

@Andrew_Davies

I can do the group admin and user roles, but can’t get the super user role working.

Have a look at my second example in the below reply. I think it covers basically the same use case as you are describing.

Row owners and roles in the same time?

No, the users being managed wouldn’t have any role at all. They would just have their own email address as an owner row, which means they would only see their own data. Only the Managers would be given the Manager role, and as a Manager would be set as a Row Owner for every user, they would have access to all data. This might be easier to explain with a picture. Consider the following example: [Screen Shot 2022-08-01 at 4.58.53 PM] In the example above, the first 3 users are Managers. Each…

@Andrew_Davies

I assume it’s best practice to use the Row ID for departments. Any issue with this you know of? I’ve tested it and it seems ok. Only slight drawback is the group is displayed as a row Id in the builder as you’d expect.

Any text value is fine, as long as it is unique per department.

@Andrew_Davies

Finally - and this is for my own sanity more than anything - if you’re not using Roles (which I am and I have access to roles on my plan), in the users table, row owners can only be applied to the email column. Is that right?

Row Owners can be applied to any email or non-computed text column in any table.
Row Owners applied to email columns will always work.
Row Owners applied to text columns will only work if you’re using Roles and at least one user has a Role that corresponds to the text value. For example, if you’re not using Roles and you create a text column, fill it with the word “Admin” and then apply Row Owners to it - then no user will see any rows in that table - unless you also have an email row owner column in the same table.