Impersonating Users in the Cube Browser doesn't seem to work more than once
in AS2005.

e.g. Start up Visual Studio, browse a cube as an Administrator , see the
full result set.
Click on the change user icon and enter the user id
e.g.
MyDomain/User1
Dimensions are restricted to members appropriate to User1
Using Dynamic Dimension Security to do this
e.g.
MyDll.MySecurity(USERNAME)
Where Mysecurity returns the appropriate set for the user.

Click on the change user icon and enter another user id
e.g.
MyDomain/User2
The dimension members displayed haven't changed.
Attaching the debuggerto the DLL shows the function is only called on the
first activation.
The function isn't called again until you resave the MDX in the role that
calls the function.

Can the Change user icon in the cube browser be used to change users?

The problem is that username impersonation is done on connection.
To solve this problem with dynamic security you need to disconnect, change
the user and then re-connect.
--
Dave Wickert [MSFT]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI Systems Team
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.


"Acius" <acius (AT) nospam (DOT) nospam> wrote

How do you disconnect in the cube browser?

Disconnecting in Management Studio doesn't seem to have any effect. (seems
to remember if you shut down Management Studio)
Only way I've found to change it is to modify the dimension security for the
role.

"Dave Wickert [MSFT]" wrote:

Hi Acius,

It seems you could only use Windows Authentication to connect SSAS, I
believe "change the user" Dave means change another windows account and
then try the relogin


Sincerely yours,

Michael Cheng
Microsoft Online Partner Support
================================================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

Hi,

In the cube browser there's a button that let's you impersonate another
user. (It works once if you're using Kerberos).
Since we're using Dynamic user security we need to test multiple users with
the same role. Dave mentioned you'd need to disconnect to test a second user.
I was after a way to disconnect.

Thanks

"Michael Cheng [MSFT]" wrote:

Hi,

You may want to "run as" a different Windows account to start Management
Studio.

Regards,

Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===



This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
<08318B21-074B-4DB6-98BB-C501904B8EEA (AT) microsoft (DOT) com>
<RvZU2AwKGHA.3680 (AT) TK2MSFTNGXA02 (DOT) phx.gbl>

So it's not possible to "disconnect, change the user and then re-connect." as
per the earlier posting by Dave?


"Peter Yang [MSFT]" wrote:

Hi,

Dynamic security is a mechanism in AS that allows you to use one role that
contains the USERNAME function to change what members it can see based
connecting user¡¯s NT USERNAME.

More information here:

http://www.mosha.com/msolap/samples/...20security.zip

Includes a ppt and sample data & instructions for how to setup and use
three techniques outlined in the ppt

Regards,

Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===


This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
<08318B21-074B-4DB6-98BB-C501904B8EEA (AT) microsoft (DOT) com>
<RvZU2AwKGHA.3680 (AT) TK2MSFTNGXA02 (DOT) phx.gbl>
<5D2A3886-1A0D-4D49-92F4-BC1F34D73C60 (AT) microsoft (DOT) com>
<nQ5sutKLGHA.608 (AT) TK2MSFTNGXA01 (DOT) phx.gbl>

Except for the bug with dynamic totals we've got dynamic dimension security
working.

Dave mentioned you'd need to disconnect to test a second user.
I was after a way to disconnect from within the cube browser.

Thanks

Hello,

Based on my research, there is no such option to disconnect in cube
browser. Change user issue is reported and is supposed to be fixed in SP1.
Sorry for any inconvenience brought.

Best Regards,

Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===

Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:

BCPS:
https://partner.microsoft.com/US/tec...rview/40010469

Others: https://partner.microsoft.com/US/tec...pportoverview/

If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default...rnational.aspx.

================================================== ===

This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
<08318B21-074B-4DB6-98BB-C501904B8EEA (AT) microsoft (DOT) com>
<RvZU2AwKGHA.3680 (AT) TK2MSFTNGXA02 (DOT) phx.gbl>
<5D2A3886-1A0D-4D49-92F4-BC1F34D73C60 (AT) microsoft (DOT) com>
<nQ5sutKLGHA.608 (AT) TK2MSFTNGXA01 (DOT) phx.gbl>
<85F495A5-16C4-4128-8E37-2E141F9C63FB (AT) microsoft (DOT) com>
<D$vsJvQMGHA.668 (AT) TK2MSFTNGXA01 (DOT) phx.gbl>