Folks,

Our objective is to incorporate dynamic dimension-level security. Our fact
data is locked down by access control lists, of which the users are members.
Our source schema represents more of a snowflake than a star, so our
dimension that returns the USERNAME attribute has a many-to-many
appearance - a user can be a member of more than one ACL, and the ACL can
have more than one user. We can successfully lock down the DIM_User
dimension through the use of an MDX expression in the role for the dimension
data, but when we add in the other related tables that make up the ACL list
(hence snowflake), the data ends up with one ACL per user at most (seems
like it picks the first). So, dimension data is being dropped.

Any ideas?

Thanks,
Dan