dbTalk Databases Forums  

security on a large dimension and performance impact (AS2005)

microsoft.public.sqlserver.olap microsoft.public.sqlserver.olap


Discuss security on a large dimension and performance impact (AS2005) in the microsoft.public.sqlserver.olap forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Jéjé
 
Posts: n/a

Default security on a large dimension and performance impact (AS2005) - 06-26-2006 , 03:38 PM






Hi,

I have to plan to apply some security in my cubes, and I'm looking for
somebody with similar setup and if you have encounter performance issues...
(or any issue)

My largest dimension (180 000 customers members) will be secured.
I'll create 200 roles, each role give access to a particular list of member
in this dimension. (its NOT a dynamic security; the leaf level will be
secured)
the same member is allowed in more then 1 role (I can't setup an hierarchy
in this dimension)
Visual total is NOT enabled
Today I have 3 users by role, but this will change to hundred of users by
roles if there is no problems.

So the user can see the total of all the customers, but when the user want
to see the customer name, only the name of allowed customers are displayed.

how this impact the performance?

Before I'll apply this security, I want to know what I have to check and
validate.

Can you share your experience?

thanks.

Jerome.



Reply With Quote
  #2  
Old   
Radu Colceriu
 
Posts: n/a

Default Re: security on a large dimension and performance impact (AS2005) - 06-27-2006 , 02:31 AM






I have a similar setup 250+ roles over 5 types of customer dimensions and I
have no query performace issues (AS2000). Visual totals are ON.

Now I migrate everything to AS2005.
The only issue I have is with creating the roles. (see my other thread)
When I create a role and I want to set the allowed set , the GUI is reading
the whole dimension expanded to the leaf members !!!! This take some time
.... up to 3 mins . (3min * 5 Dims * 250 roles -> )

Now I'm trying to create an XMLA that whill create my roles, but is not so
easy


Greetings,
-Radiu


"Jéjé" <willgart_A_ (AT) hotmail_A_ (DOT) com> wrote

Quote:
Hi,

I have to plan to apply some security in my cubes, and I'm looking for
somebody with similar setup and if you have encounter performance
issues... (or any issue)

My largest dimension (180 000 customers members) will be secured.
I'll create 200 roles, each role give access to a particular list of
member in this dimension. (its NOT a dynamic security; the leaf level will
be secured)
the same member is allowed in more then 1 role (I can't setup an hierarchy
in this dimension)
Visual total is NOT enabled
Today I have 3 users by role, but this will change to hundred of users by
roles if there is no problems.

So the user can see the total of all the customers, but when the user want
to see the customer name, only the name of allowed customers are
displayed.

how this impact the performance?

Before I'll apply this security, I want to know what I have to check and
validate.

Can you share your experience?

thanks.

Jerome.





Reply With Quote
  #3  
Old   
Jéjé
 
Posts: n/a

Default Re: security on a large dimension and performance impact (AS2005) - 06-27-2006 , 09:00 AM



Yeah, its long to display the list, but the system display only the 200
first members (I think its 200), after 200 you have to click and a filter
window appear.

But...
I'll create a script to generate the XMLA command
I have the list of user / authorized customer in my database, I'll use it to
generate my command.

thanks for your feedback.


"Radu Colceriu" <radu_colceriu (AT) hotmail (DOT) com> wrote

Quote:
I have a similar setup 250+ roles over 5 types of customer dimensions and I
have no query performace issues (AS2000). Visual totals are ON.

Now I migrate everything to AS2005.
The only issue I have is with creating the roles. (see my other thread)
When I create a role and I want to set the allowed set , the GUI is
reading the whole dimension expanded to the leaf members !!!! This take
some time ... up to 3 mins . (3min * 5 Dims * 250 roles -> )

Now I'm trying to create an XMLA that whill create my roles, but is not so
easy


Greetings,
-Radiu


"Jéjé" <willgart_A_ (AT) hotmail_A_ (DOT) com> wrote in message
news:eYvutBWmGHA.4212 (AT) TK2MSFTNGP03 (DOT) phx.gbl...
Hi,

I have to plan to apply some security in my cubes, and I'm looking for
somebody with similar setup and if you have encounter performance
issues... (or any issue)

My largest dimension (180 000 customers members) will be secured.
I'll create 200 roles, each role give access to a particular list of
member in this dimension. (its NOT a dynamic security; the leaf level
will be secured)
the same member is allowed in more then 1 role (I can't setup an
hierarchy in this dimension)
Visual total is NOT enabled
Today I have 3 users by role, but this will change to hundred of users by
roles if there is no problems.

So the user can see the total of all the customers, but when the user
want to see the customer name, only the name of allowed customers are
displayed.

how this impact the performance?

Before I'll apply this security, I want to know what I have to check and
validate.

Can you share your experience?

thanks.

Jerome.







Reply With Quote
  #4  
Old   
Radu Colceriu
 
Posts: n/a

Default Re: security on a large dimension and performance impact (AS2005) - 06-27-2006 , 09:32 AM



Only first 200 members? Mine is showing all members (40.000+) . I don't
have any filter.


I have SQL 2005 EE x64. I'm editing the roles wit the management studio ...
online.


Can you tell me how are you editing the roles and where is that filter?

Thanks,
Radu

"Jéjé" <willgart_A_ (AT) hotmail_A_ (DOT) com> wrote

Quote:
Yeah, its long to display the list, but the system display only the 200
first members (I think its 200), after 200 you have to click and a filter
window appear.

But...
I'll create a script to generate the XMLA command
I have the list of user / authorized customer in my database, I'll use it
to generate my command.

thanks for your feedback.


"Radu Colceriu" <radu_colceriu (AT) hotmail (DOT) com> wrote in message
news:%23vK$jubmGHA.4212 (AT) TK2MSFTNGP03 (DOT) phx.gbl...
I have a similar setup 250+ roles over 5 types of customer dimensions and
I have no query performace issues (AS2000). Visual totals are ON.

Now I migrate everything to AS2005.
The only issue I have is with creating the roles. (see my other thread)
When I create a role and I want to set the allowed set , the GUI is
reading the whole dimension expanded to the leaf members !!!! This take
some time ... up to 3 mins . (3min * 5 Dims * 250 roles -> )

Now I'm trying to create an XMLA that whill create my roles, but is not
so easy


Greetings,
-Radiu


"Jéjé" <willgart_A_ (AT) hotmail_A_ (DOT) com> wrote in message
news:eYvutBWmGHA.4212 (AT) TK2MSFTNGP03 (DOT) phx.gbl...
Hi,

I have to plan to apply some security in my cubes, and I'm looking for
somebody with similar setup and if you have encounter performance
issues... (or any issue)

My largest dimension (180 000 customers members) will be secured.
I'll create 200 roles, each role give access to a particular list of
member in this dimension. (its NOT a dynamic security; the leaf level
will be secured)
the same member is allowed in more then 1 role (I can't setup an
hierarchy in this dimension)
Visual total is NOT enabled
Today I have 3 users by role, but this will change to hundred of users
by roles if there is no problems.

So the user can see the total of all the customers, but when the user
want to see the customer name, only the name of allowed customers are
displayed.

how this impact the performance?

Before I'll apply this security, I want to know what I have to check and
validate.

Can you share your experience?

thanks.

Jerome.









Reply With Quote
  #5  
Old   
Jéjé
 
Posts: n/a

Default Re: security on a large dimension and performance impact (AS2005) - 06-27-2006 , 09:45 AM



in management studio, when I open a role and when I go to my attribute, the
system display the first 200 members (I'm not sure about the number)
and the last one is "Filter member...", a clickable item which open a popup
window.

also, after I have selected some members, the system display the first 200
members + selected members, this takes more time to display the result.
But you are right, its slow to open this page with a large number of
members.

I don't do anything special to display the first members, its an automatic
process.

"Radu Colceriu" <radu_colceriu (AT) hotmail (DOT) com> wrote

Quote:
Only first 200 members? Mine is showing all members (40.000+) . I
don't have any filter.


I have SQL 2005 EE x64. I'm editing the roles wit the management studio
... online.


Can you tell me how are you editing the roles and where is that filter?

Thanks,
Radu

"Jéjé" <willgart_A_ (AT) hotmail_A_ (DOT) com> wrote in message
news:O$ySMIfmGHA.3804 (AT) TK2MSFTNGP05 (DOT) phx.gbl...
Yeah, its long to display the list, but the system display only the 200
first members (I think its 200), after 200 you have to click and a filter
window appear.

But...
I'll create a script to generate the XMLA command
I have the list of user / authorized customer in my database, I'll use it
to generate my command.

thanks for your feedback.


"Radu Colceriu" <radu_colceriu (AT) hotmail (DOT) com> wrote in message
news:%23vK$jubmGHA.4212 (AT) TK2MSFTNGP03 (DOT) phx.gbl...
I have a similar setup 250+ roles over 5 types of customer dimensions and
I have no query performace issues (AS2000). Visual totals are ON.

Now I migrate everything to AS2005.
The only issue I have is with creating the roles. (see my other thread)
When I create a role and I want to set the allowed set , the GUI is
reading the whole dimension expanded to the leaf members !!!! This take
some time ... up to 3 mins . (3min * 5 Dims * 250 roles -> )

Now I'm trying to create an XMLA that whill create my roles, but is not
so easy


Greetings,
-Radiu


"Jéjé" <willgart_A_ (AT) hotmail_A_ (DOT) com> wrote in message
news:eYvutBWmGHA.4212 (AT) TK2MSFTNGP03 (DOT) phx.gbl...
Hi,

I have to plan to apply some security in my cubes, and I'm looking for
somebody with similar setup and if you have encounter performance
issues... (or any issue)

My largest dimension (180 000 customers members) will be secured.
I'll create 200 roles, each role give access to a particular list of
member in this dimension. (its NOT a dynamic security; the leaf level
will be secured)
the same member is allowed in more then 1 role (I can't setup an
hierarchy in this dimension)
Visual total is NOT enabled
Today I have 3 users by role, but this will change to hundred of users
by roles if there is no problems.

So the user can see the total of all the customers, but when the user
want to see the customer name, only the name of allowed customers are
displayed.

how this impact the performance?

Before I'll apply this security, I want to know what I have to check
and validate.

Can you share your experience?

thanks.

Jerome.











Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.