It is meant to be like that.
- Download permissions refer to the ability to download a TWBX (and possibly data if the workbook uses an extract).
- Write permissions help control whether someone can Publish to a project.
Neither of those permissions really have much to do with Data Server. If the user has permissions to read data via Data Server, then they can extract locally, in just the same way one could extract if you had permissions against a SQL Server, Oracle box, etc. There is no permission that allows one to "turn off" the ability to extract in Desktop.
Hope this helps!
Tableau Server 7 offers set of permissions for data server, download and write are both available permissions for data server.
With deny access for both permissions, user now can not "create a local copy" BUT user still can extract locally of the data server.
If a user still can extract locally, so why "create a local copy" blocked?
1 of 1 people found this helpful
You make a good point - if a user can extract data, why prevent them from downloading the data source? They have "the goods" already, after all.
I'd venture two reasons why this was added:
- Administrators want to prevent users from seeing the definition of calculated fields, queries, and details about the original server and database that the data source contains
- Administrators don't want "phantom copies" of certain data sources floating around, getting modified and eventually re-published, which could lead to confusion
I suggest you create an idea in the "Ideas" forum about locking down the ability to extract (regardless of whether it's a data server data source or not, actually). A few other customers have asked about this, but I'm not sure a request was ever made in that forum for the feature...
You're right for the first reason, "create a local copy" will be stored as .tdsx file that includes meta data.
But I don't think the second reason is consistent because delete or write the existing data source can also be managed by permissions; so user that can extract the data server can not re-publish if they don't have permissions.
Yes, I think it was a logical that some people also ask the feature, because it was closed to the need for managing data for tableau desktop.
Thanks for your answers and suggestions.
I see #2 as more of a way to avoid "Excel ****".
Even if you don't allow re-publishing of these data sources, people could/will still create reports based off of "modified" local data sources vs. Server "IT Blessed" data sources - then people get into meetings, their numbers don't match, and the whole meeting becomes an exercise in reconciling the differences in the reports
Just realized and updated (since version? well I keep the latest version 8-) that the permission can not download the data source now applied correctly. Good.