Hi there,
We are using Databricks and are in the early stages of adopting it. Recently, I noticed something in Databricks that caught my attention.
I implemented column-level security, which works such that if you are a member of a particular group, you can see unmasked data; otherwise, the data is masked.
However, I observed that as a workspace admin, you are able to view all users' notebooks. If a user whose notebook is being viewed by the admin has higher privileges and can see unmasked data, and the output of that data is stored in their notebook, then the admin can also view the unmasked data—even though they are not part of the group with the necessary privileges.
I'm wondering if this does not sound like a security issue?
