We created a set of roles to restrict users access to
cubes and to dimensions withing the cube. We do not have
an "everyone" assigned to any role

Currently any user on the network can log on (through
Excel PTS) and view all the cubes (even if they are not
defined to a role) and they can view all dimensions
within the cube. The users are not member of
Administrator or OLAP Administrator on the domain
controlle

Our domain controller is on a seperate server from the
OLAP/SQL server. The domain controller and the OLAP/SQL
server are running Windows 2000 server. Users are either
running Windows 2000 or XP Professional

Finally, we recently changed the computer name of the OLAP Server. Not sure if that impactred any of the security permissions.

First, let us see who the system thinks you are.
What is returned when you issue the following MDX statement against FoodMart
from one of your client machines.

WITH MEMBER [Measures].[X] AS 'Username'
SELECT {X} ON 0 FROM Sales

Are you being authenticated with the account that you are expecting?
--
Dave Wickert [MS]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI Practices Team
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.


"Allan" <alatts (AT) yahoo (DOT) com> wrote

Thank you for responding to my message. We ran the script you
suggested. The system responded with our domain name \ user id. I
guess this is what we wanted it to do.

I then wentto Analysis services. I confirmed that I have a role with a
security group where the user ID I logged in as was a member. This role
restricted one of my dimensions.

I was able to log into Excel, make a connection to the OLAP database and
see all part of the restricted dimension.



*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Can you check that the this user is not part of OLAP Administrators NT Group
and not part of Administrators built-in group.

--
==================================================
Mosha Pasumansky - http://www.mosha.com/msolap
Development Lead in the Analysis Server team
All you need is love (John Lennon)
Disclaimer : This posting is provided "AS IS" with no warranties, and
confers no rights.
==================================================

"Allan Latts" <alatts (AT) yahoo (DOT) com> wrote

The user is only a member of Domain Users and the group that had the
Cube Security. We were also able to go in under a user that had no
authority and change the security roles.

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

I have the same problem, everything started since we promoted the OLAP server to Domain Controller also, I have been trying to solve the problem for a week with no luck until now.

Have you solved the problem?

************************************************** ********************
Sent via Fuzzy Software @ http://www.fuzzysoftware.com/
Comprehensive, categorised, searchable collection of links to ASP & ASP.NET resources...

Another thing to check is HKLM\Software\Microsoft\OLAP
Server\CurrentVersion\Security key with regsvr32.exe - you need to see the
permissions.
If anybody except OLAP Administrators group has access to it - it could be a
problem. Note the little "inherit from parent" checkbox - sometimes AD group
policy turns it on, but really it should be turned off.

--
==================================================
Mosha Pasumansky - http://www.mosha.com/msolap
Development Lead in the Analysis Server team
All you need is love (John Lennon)
Disclaimer : This posting is provided "AS IS" with no warranties, and
confers no rights.
==================================================

"Allan" <anonymous (AT) devdex (DOT) com> wrote