dbTalk Databases Forums  

Managing security with multiple roles

microsoft.public.sqlserver.olap microsoft.public.sqlserver.olap


Discuss Managing security with multiple roles in the microsoft.public.sqlserver.olap forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Erdal Akbulut
 
Posts: n/a

Default Managing security with multiple roles - 12-19-2005 , 07:47 AM






Hi,

I am using SQLServer 2000 Analysis Services and very new to this and MDX.

I have a sales cube with sales and cost data for different countries. I
want to hide-show Country and Cost data based on user role.

I have created Country_A_WithCost, Country_A_WithoutCost,
Country_B_WithCost, Country_B_WithoutCost roles.

It works fine when I assign a user to a group, but if a user belong to two
different groups that is not what I expected.

For example.

If User is in Country_A_WithoutCost role, s/he only can see Country A Sales
without Cost (by restricting country dimension and by restricting
measures.)
If User is in Country_A_WithoutCost and Country_B_WithoutCost role, s/he
only can see Country A and B Sales without Cost (by restricting country
dimension and by restricting measures.)

But when I assigned user to Country_A_WithoutCost and Country_B_WithCost
s/he can see both country A and B sales with cost data. I would expect s/he
can see Country A sales without cost and Country B Sales with cost.

Probably it is a simple issue but I cannot see.

Could somebody help on this.

thanks in advance

erdal



Reply With Quote
  #2  
Old   
Erdal Akbulut
 
Posts: n/a

Default Re: Managing security with multiple roles - 12-20-2005 , 02:20 AM






I have solved the problem removing dimension security and implementing cell
level security.
For each role I have added an MDX to check columns and rows.

For Country A Cost Role
(Measures.CurrentMember.Name="Sales" OR
Measures.CurrentMember.Name="Cost" OR
) AND
Country.CurrentMember.Name="Country A"

For Country A without Cost Role

(Measures.CurrentMember.Name="Sales" OR ) AND
Country.CurrentMember.Name="Country A"

and repeated for other roles for other countries.

works well

erdal



"Erdal Akbulut" <erdalim21 (AT) yahoo (DOT) com> wrote

Quote:
Hi,

I am using SQLServer 2000 Analysis Services and very new to this and MDX.

I have a sales cube with sales and cost data for different countries. I
want to hide-show Country and Cost data based on user role.

I have created Country_A_WithCost, Country_A_WithoutCost,
Country_B_WithCost, Country_B_WithoutCost roles.

It works fine when I assign a user to a group, but if a user belong to two
different groups that is not what I expected.

For example.

If User is in Country_A_WithoutCost role, s/he only can see Country A
Sales
without Cost (by restricting country dimension and by restricting
measures.)
If User is in Country_A_WithoutCost and Country_B_WithoutCost role,
s/he
only can see Country A and B Sales without Cost (by restricting country
dimension and by restricting measures.)

But when I assigned user to Country_A_WithoutCost and Country_B_WithCost
s/he can see both country A and B sales with cost data. I would expect
s/he
can see Country A sales without cost and Country B Sales with cost.

Probably it is a simple issue but I cannot see.

Could somebody help on this.

thanks in advance

erdal





Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.