Hi,

My scenario is:

Win2K Server
AS SP3A
IIS Basic Authentication and "Log on locally" for all application
users

I have a cube where I disabled the Everyone role and created one that
allows "Unsrestricted Read" for the group "APP_Users". This group
contains the user "Test", who is neither an OLAP Administrator nor an
machine Administrator. After that the "Test" user was able to see any
data but not to change, as expected. Hovewer, after I added another
role, that contains only the user "Test", with the following
configuration:

Cell Security Police: Advanced

Read: Unsrestricted
Read Contingent: Unsrestricted
Read/Write: a given subcube (according to an MDX definition)

the "Teste" user became able to writeback in cells that were out of
the subcube defined in the MDX.

Besides, to debbug I changed the Read/Write to "Fully Restricted" but
with a very strange behaviour, the "Test" user was still able to
writeback in those cells.

I've already worked with Roles and Cells Security, though I have no
more idea what can be wrong.

I'd appreciate any help.

Thanks in advance,

Vinicius Bellino