The author can create a new dataset if they have access to the data source and bypass the RLS restrictions. It is important to note that Quick Sight RLS operates at the dataset level with different permission as described below
-
Dataset owners: All data can be seen when RLS is applied
-
Readers: They can only see data restricted by the permission dataset rules
-
Authors: They have broader permission that can allow them to access source directly.
You can prevent RLS Bypass using Lake Formation
Regards,
Demola