Hello, I need help with Cube Functions. I want a user can see some levels of
a dimension, other user see all levels or dont see anything.

In cube functions i choose a User, in dimension tab i choose the dimension to
customize. I worked with it selecting thespecific level for that user.
Clicked in accept

When I do TEST FUNCTION the cube is doing as I want.

But when I access it in MS Excel I see all levels.

This is a common problem that I have: Security of all cubes.
For example, if I choose the user X for another cube the user Y can see this
cube and all cubes.

The only security I put is at windows level, with Permissions and Security
Tabs

Hope somebody can help me or guide me implementing security.


--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums...-olap/200511/1

Check that your users are not in the OLAP Administrators group on the AS
server. If they are in this role they will have access to all members
and dimensions regardless of any other security settings.

--
Regards
Darren Gosbell [MCSD]
<dgosbell_at_yahoo_dot_com>
Blog: http://www.geekswithblogs.net/darrengosbell

In article <56c63ea6df311@uwe>, u9027@uwe says...

Hi Darren,

I check in the Analysis Server and in OLAP Administrator is only the ADMIN
user.

The access method is MS Excel. This Excel is contained in a Cube folder (D:\
Cube). The Cube folder has permissions only for OLAP_GROUP. This group is on
a domain controller that has a few users. This group too, has only the
Reading permission.
In security tab (the one with 5 checkboxes), I see that Everyone has
FullControl permission at the root level (like D:\)
Where must be the restriction: on the domain controller, on OLAP SQL Server,
or Analysis Manager?

On other hand, I create a cube with role (cube function) for only one user
and restricted a dimension. He can see all levels.

Please help. Thanks


--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums...-olap/200511/1

That is good, you should not have ordinary users in the OLAP
Administrators group as this group bypasses dimensional security.

The restriction only needs to be set in Analysis Manager. Excel acts as
a client to the AS Server and it is on that connection to the AS server
that dimensional security gets applied. The file permissions on the
Excel file do not make a difference to what members in the dimensions
that a user can see.

Check what other roles you have in your database, the security roles are
unioned together, so if you have a role with "Everyone" in it that can
see all the cubes and dimensions, none of your other roles will have any
effect.

--
Regards
Darren Gosbell [MCSD]
Blog: http://www.geekswithblogs.net/darrengosbell