dbTalk Databases Forums  

Cube Roles - Dimension Permissions Issues

microsoft.public.sqlserver.olap microsoft.public.sqlserver.olap


Discuss Cube Roles - Dimension Permissions Issues in the microsoft.public.sqlserver.olap forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
John.Eisbrener@gmail.com
 
Posts: n/a

Default Cube Roles - Dimension Permissions Issues - 04-03-2006 , 11:43 AM






Ok, I'm still new to OLAP and our company unfortunately is using SQL
Server 2000, so please keep that in mind if posting a reply. My issue
is that I have a finance cube with multiple dimensions. The two I'm
concerned with are a Department Dimension and a Classification
Dimension. The Department Dimension is pretty self-explanitory, you
drill into each department to see Sub-Departments down to Account
Numbers. The Classification Dimension slices the cube differently by
grouping all accounts of like type together (Travel, Phone, Office
Supplies, etc) without regard to what department they lie in. When I
roll out this cube, some people will only have access to select
departments, which is easy enough to set up, but now I want those
security restrictions to affect the Classificiation Dimension.
Currently, if I have a Manager set up to only view a certain department
(i.e. IT) he can still see everyone else's Travel accounts using the
Classification Dimension.

I think the problem is that I can't find a way to represent an array
that will take the user's Department restrictions into account in my
Classification dimension.

Does anyone know how to reference a different dimension's security
permissions when setting up dimension security permissions in Analysis
Services 2000?

Thanks,

John


Reply With Quote
  #2  
Old   
Deepak Puri
 
Posts: n/a

Default Re: Cube Roles - Dimension Permissions Issues - 04-03-2006 , 04:04 PM






Hi John,

Have you tried the VisualTotals option:

http://msdn.microsoft.com/library/de.../en-us/olapdma
d/agsecurity_2b95.asp
Quote:
Custom Rules in Dimension Security
...
Visual Totals
For each dimension you can specify options for visual totals. These
options determine whether displayed, aggregated cell values are
calculated according to all of a member's descendants or only the
viewable descendants. In the first case, end users in the role see
actual totals; in the second, they see visual totals. A third option is
available to display visual totals at and above a specified level, but
display actual totals below it.
...
Quote:

- Deepak

Deepak Puri
Microsoft MVP - SQL Server

*** Sent via Developersdex http://www.developersdex.com ***


Reply With Quote
  #3  
Old   
JohnE
 
Posts: n/a

Default Re: Cube Roles - Dimension Permissions Issues - 04-03-2006 , 04:47 PM



Deepak,

Thanks for the quick reply.

Visual Total will take care of the aggregated values, but they do not
filter out those accounts that shouldn't be shown. For instance, if I
have account number "1234 - Rental Car" that is filtered out in the
Department Dimension, it will still show up under the Travel Member of
the Classification Dimension. The Visual Totals option will make sure
that the totals are correct, but again, will not ensure that the
accounts that I restrict in one dimension don't show up in another.

Thanks for the reply though,

John


Reply With Quote
  #4  
Old   
JohnE
 
Posts: n/a

Default Re: Cube Roles - Dimension Permissions Issues - 04-04-2006 , 10:24 AM



Well, Deepak, you ended up being correct, the only thing that I needed
to change was make my dimensions public as opposed to private. The
Visual Totals option wasn't working correctly when my dimensions were
private, which is weird, but at any rate it's now fixed. Thanks for
the help,

John


Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.