Hi, I have an ASP application which is a custom front end to Analysis
Services 2000 (using ADOMD). Security is enforced by creating a custom
Aggregate member when building queries. For example,

WITH member [Products].[Allowed Vendors] AS
'Aggregate([Products].[Vendor ID].[&1],[Products].[Vendor ID].[&2])'
SELECT...
FROM...
WHERE ([Products].[Allowed Vendors])

This solution still works in SSAS 2005, however, there are significant
performance problems with this approach as compared to using dimension
security. The problem with dimension security is that I need the
security to be enforced dynamically at run-time (in other words, I
can't create a seperate role for every combination of Vendors who may
be using my cube).

I saw that in SQL 2005, a new "CUSTOMDATA" connection string parameter
and MDX function have been added which seem to be the perfect solution.
However, I can not find any documentation on how to actually use
these. What I have tried so far is:

1) Add the following to my connection string: Custom
Data="[Products].[Vendor ID].[&1],[Products].[Vendor ID].[&2]"

2) Create 1 security role, and set the allowed members MDX for my
Vendor ID attribute to:
STRTOSET(CUSTOMDATA) or just: CUSTOMDATA.

It seems to me like this should work, however, everytime I try to make
a connection using this connection string, I get the following error:
"Errors in the OLE DB provider: The Extended Properties property is set
to a value that is not supported"

Does anyone have any experience with or documenation on using the new
"CUSTOMDATA" functionality in SSAS 2005?

There was a problem in the RTM OLE DB client bits for some connection string
properties including CustomData. If you switch your client to SP1 then this
should work.

Thanks,
Akshai

--
--
Try out the MSDN Forums for Analysis Services at:
http://forums.microsoft.com/MSDN/Sho...ID=83&SiteID=1

This posting is provided "AS IS" with no warranties, and confers no rights
Please do not send email directly to this alias. This alias is for newsgroup
purposes only.


<dsiehler (AT) c-sg (DOT) com> wrote

Thanks, I installed SP1 on my Analysis Server and, now, if I use the
server as the client as well (using MDX sample application), my dynamic
security scenario works perfectly. However, I am still not able to
connect from the actual client machine (a web server). Since I do not
have SSAS 2005 installed on this server, I am not able to install SP1.
Is there a service pack specifically for the OLE DB client?

Yes, the AS OLE DB client comes as part of the feature pack which has also
been updated for SP1. See here:

http://www.microsoft.com/downloads/d...DisplayLang=en

Look at the section on "Microsoft SQL Server 2005 Analysis Services 9.0 OLE
DB Provider"

HTH,
Akshai
--
Try out the MSDN Forums for Analysis Services at:
http://forums.microsoft.com/MSDN/Sho...ID=83&SiteID=1

This posting is provided "AS IS" with no warranties, and confers no rights
Please do not send email directly to this alias. This alias is for newsgroup
purposes only.

<dsiehler (AT) c-sg (DOT) com> wrote

Thanks, that did the trick.