Data Protection Rule should not be editable by other except the user who created it.

When a Steward with the Manage Data Protection rule permission creates a Data protection rule and applies the rule on the column name, User who is restricted cannot see the column, however when the same user who is restricted can go to the rule and edit the rule, so that he can overwrite the rule and see all the data that he/she is restricted. This is a major bug, when we say DPR is working but it doesnot work if other user has the ability to edit the rule created by other Users

Needed By

Week

Post comment

Guest

Reply
| Apr 25, 2023

Hi! Data protection rules have two permissions: "view data protection rules" and "manage data protection rules". The "manage data protection rules" permission should be very tightly held and only given to a limited number of power users.
In the scenario described in this idea, the user is able to manage the data protection rule because they have been given a permission to "manage data protection rules." That is not a defect it is working as designed. The solution for this scenario is to only give "manage data protection rule" permissions to users that you want to edit.

0 reply Hide replies

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.

Please enter your email address

RELATED IDEAS

Data Protection Rule should not be editable by other except the user who created it.