I've been able to reproduce the following security error using Virtual
Cubes. When any secured user logs into the virtual cube, the less
restricted (including OLAP Admins) will "inherit" the more restricted
user's permissions.

Try this:
1 - Open the Trained Cube in Foodmart;
2 - Create a role that is more restricted than a default 'Everyone'
role. Restrict the 'Measures' dimensions disallowing a few members.
3 - Set the role to be enforced on the server;
4 - Test the unrestricted role. Verify that you have access to all
measures;
5 - Test the restricted role. Verify that you do not have access to
all measures;
6 - Go back to the unrestricted role and verify that the values for
the restricted measures are zero.

I've been able to repro this using Foodmart on two machines already,
but this actually started out as problem at a big client of mine. On
Foodmart, if you enforce security on the client the problem ceases.
This did not solve the problem at my client though.

Any experience with that out there? Microsoft?

Thanks,
Alex Almeida

Hi Alex,

Thanks for reporting this. I have tested your repro and I can confirm this
bug. I also tested it with the latest build (8.00.0971) and the problem
still occured. I created an entry in our bug system and asked development
to make sure that this is fixed in our next Analyis version (SQL2005).

When putting it back to the enforce on client was it working in every test
I did. Did you close the AS manager and did you restart the Analysis
service to make sure that the roles are not loaded from cache when putting
those back on enforce on client?

Thx,
Bas

"This posting is provided "AS IS" with no warranties, and confers no
rights."