Do access grants cascade or apply to fields that reference a field with an access grant? (Community)

View the original community article here

Last tested: Nov 19, 2020
 

No, access grants do not have cascading restrictions. Therefore with the existing functionality, every object needs to be explicitly defined with an access grant.

If we have the below LookML and do a sum on a dimension that has an access grant, we'll see the same results when we delete the required access grant from the dimension. So we will need to define the required access grant for both fields to correctly restrict the information.

dimension: dim1 {

required_access_grants: [sensitive_info]

type: number

sql: ${TABLE}.col1 ;;

}

measure: sum_of_dim1 {

type:sum

sql: ${dim1};;

}