-
1. Re: Permissions with 'All users' behaving weirdly
Nathan Panuco May 26, 2016 8:33 AM (in response to Lazy Rambler)1 of 1 people found this helpfulHi there!
What are the permissions differences that are assigned between "All Users" and "Group A"? Since the workbook has both of those groups and the user is in both of the groups, "Group A" must be granting explicit permission since removing it denies access. Tableau evaluates permissions first by looking at the user role (are you the admin? Have you been explicitly denied or allowed permission?) then checks out group membership (has a group you are a member of been explicitly denied or allowed access?).
In this instance, I suspect the two groups do not have matching permissions and All Users is likely NOT set to "deny", just "unspecified". If a user is explicitly denied access and another group explicitly allows access, the user will be denied access. However, using the "unspecified" permission tells the server to just go along with whatever other permissions are set for that "object". I'm suspecting that the user's permissions are set to "unspecified" and the group "all users" are also set to unspecified while "group A" is set to Allow. When the group with the "Allow" permissions are removed, nothing is granting the user explicit permissions and if nothing grants or denies access, the default is to deny access. If this isn't the case, screenshots of the permission screen would be extremely helpful in troubleshooting.
Interworks has a great article on this: https://www.interworks.com/blog/bfair/2015/09/29/tableau-server-permissions-demystified
Hope that helps!
-
2. Re: Permissions with 'All users' behaving weirdly
Lazy Rambler May 26, 2016 8:58 AM (in response to Nathan Panuco) -
3. Re: Permissions with 'All users' behaving weirdly
Nathan Panuco May 26, 2016 9:27 AM (in response to Lazy Rambler)Hmmm...it does look like "View" is set to explicitly allow on both groups...this IS odd! Let's try something: Navigate to the workbook and go to Permissions. Temporarily remove the "All FOF Publishers" group and then, in the "search for a user to view their permissions" box, type in a single user who experiences the issue. They will show up at the bottom of the screen showing you what permissions are assigned based on the current groups assigned to that workbook. From there, hover over the grey boxes to see how the user's permissions are being assigned. It will likely say something under "view" like "View: Denied <reason and rule>" and then use that information to address whatever rule is denying them access. If the users permissions still match but don't allow access, this may be a case for Tableau Technical Support: http://www.tableau.com/support/request
-
4. Re: Permissions with 'All users' behaving weirdly
Lazy Rambler May 26, 2016 10:27 AM (in response to Nathan Panuco)Tried it.
the viewer was still not able to access it. Raise a case. Thanks.
-
5. Re: Permissions with 'All users' behaving weirdly
Mark Wu May 26, 2016 1:08 PM (in response to Lazy Rambler)Try to delete the user and add the user back again
-
6. Re: Permissions with 'All users' behaving weirdly
Lazy Rambler May 31, 2016 6:22 AM (in response to Mark Wu)I wish. None of the users in the 'All users' who are not in the other small group are able to view the workbook.
-
7. Re: Permissions with 'All users' behaving weirdly
David Mannering May 31, 2016 10:05 AM (in response to Lazy Rambler)Have you tried turning on the "Connect" permissions for All Users?
-
8. Re: Permissions with 'All users' behaving weirdly
Lazy Rambler May 31, 2016 10:28 AM (in response to David Mannering)Thanks David.
I got the workbook republished with 'Embedded password" (It was prompt user earlier). It looks to work. I did not give the 'connect' permission.