|
Home > Archive > MS SQL Server OLAP > December 2005 > Managing security with multiple roles
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Managing security with multiple roles
|
|
| Erdal Akbulut 2005-12-19, 9:23 am |
| Hi,
I am using SQLServer 2000 Analysis Services and very new to this and MDX.
I have a sales cube with sales and cost data for different countries. I
want to hide-show Country and Cost data based on user role.
I have created Country_A_WithCost, Country_A_WithoutCos
t,
Country_B_WithCost, Country_B_WithoutCos
t roles.
It works fine when I assign a user to a group, but if a user belong to two
different groups that is not what I expected.
For example.
If User is in Country_A_WithoutCos
t role, s/he only can see Country A Sales
without Cost (by restricting country dimension and by restricting
measures.)
If User is in Country_A_WithoutCos
t and Country_B_WithoutCos
t role, s/he
only can see Country A and B Sales without Cost (by restricting country
dimension and by restricting measures.)
But when I assigned user to Country_A_WithoutCos
t and Country_B_WithCost
s/he can see both country A and B sales with cost data. I would expect s/he
can see Country A sales without cost and Country B Sales with cost.
Probably it is a simple issue but I cannot see.
Could somebody help on this.
thanks in advance
erdal
| |
| Erdal Akbulut 2005-12-20, 3:24 am |
| I have solved the problem removing dimension security and implementing cell
level security.
For each role I have added an MDX to check columns and rows.
For Country A Cost Role
(Measures.CurrentMember.Name="Sales" OR
Measures.CurrentMember.Name="Cost" OR
) AND
Country.CurrentMember.Name="Country A"
For Country A without Cost Role
(Measures.CurrentMember.Name="Sales" OR ) AND
Country.CurrentMember.Name="Country A"
and repeated for other roles for other countries.
works well
erdal
"Erdal Akbulut" <erdalim21@yahoo.com> wrote in message
news:eKdQTLKBGHA.3928@TK2MSFTNGP11.phx.gbl...
> Hi,
>
> I am using SQLServer 2000 Analysis Services and very new to this and MDX.
>
> I have a sales cube with sales and cost data for different countries. I
> want to hide-show Country and Cost data based on user role.
>
> I have created Country_A_WithCost, Country_A_WithoutCos
t,
> Country_B_WithCost, Country_B_WithoutCos
t roles.
>
> It works fine when I assign a user to a group, but if a user belong to two
> different groups that is not what I expected.
>
> For example.
>
> If User is in Country_A_WithoutCos
t role, s/he only can see Country A
Sales
> without Cost (by restricting country dimension and by restricting
> measures.)
> If User is in Country_A_WithoutCos
t and Country_B_WithoutCos
t role,
s/he
> only can see Country A and B Sales without Cost (by restricting country
> dimension and by restricting measures.)
>
> But when I assigned user to Country_A_WithoutCos
t and Country_B_WithCost
> s/he can see both country A and B sales with cost data. I would expect
s/he
> can see Country A sales without cost and Country B Sales with cost.
>
> Probably it is a simple issue but I cannot see.
>
> Could somebody help on this.
>
> thanks in advance
>
> erdal
>
>
|
|
|
|
|