Hi,

I have defined server side roles and have tried to restirct some users
to see only partial data e.g. I have a Product dimension ( ProdCategory,
ProdFamily, etc.) and selected one of the ProdCategory for the user.

Then I tried to process the cube and it gave me an error something like
the'top visible level must have unique names....' so I went to edit the
the Product Dimension and in the advanced propert for ProdCategory set
the 'Member Names Unique' property to TRUE (the default was FALSE)...
then I processed the dimension and them the cube (I selected the rebuild
option and not the incremental)....all went okay so far... I even tested
the rule and it was showing data as I was expected after applying the
rule...

BUT when I tested browsing the cube at the client side, the role
restriction does not seem to have been applied

Can someone please help me out.
Thanks

Check your roles assigned to that user. Remember that members are combined
for all roles that a user is a member of. So if one of the roles say that a
person can see all customers in the USA -- and another role says that a
person can see just EUROPE. When the user actually looks the customers, they
will be able to see BOTH. Thus if you have the default "everyone" has access
role, then no matter how you configure additional roles, they will be able
to see all members.
--
Dave Wickert [MS]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI Practices Team
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.


"Learner" <wantnospam (AT) email (DOT) com> wrote

Dave thanks for the reply.

I already made sure of that and actually my test role is very simple.
The user for which I am testing the role is myself and this user is only
present in one (1) role which is not working The only thing is that I
am the one who created the Cube...could this be the problem? Should I
try it for some other user?

Does it have ANYTHING to do with the ODBC connection??? Just shooting in
the dark 'cause this has ben a few days and I still can not solve this
problem.

Looking forward to you reply and hopefully a solution.

Regards.

Hello.

I am assuming that your username was picked off your domain.
How are you then getting the other user's username? Does he/she also
reside on the same domain?




*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

yes the user user also resides on the same domain (I.e. the same domain
as mine).

Is that user in the OLAP Administrators group? If so, then they always have
full access.
Is that user in the machine Administrators group? If so, then they always
have full access.

Have the user issue the following query.

WITH MEMBER [Measures].[X] AS 'Username'
SELECT {X} ON 0 FROM Sales

What does it return? It should be the authenticated user that you are using
for Roles. If not, then there is a configuration problem.

--
Dave Wickert [MS]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI Practices Team
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.


"Learner" <wantnospam (AT) email (DOT) com> wrote

Dave,

Many thanks for the reply and the tip. I THINK the user is defined as a
member of OLAP Administrator group BUT only on his local machine and NOT
on the server. I'll check however but would that make any difference if
the cube being accessed is on the SERVER? Please guide.

Equally important:
Where do I enter this query? I typed it EXACTLY as it is in the sample
MDX application and selected Food Mart in the cube... but got an
error

Where should I type the query and do I need to change any part of it?
Sorry if this sounds naive but I'm very new to OAP and especially MDX.

Thanks