Hi...

I have Win 2003 Sql 2000 EE Sp 3a


I have some cubes and around 140 roles (called standard) where I define for
some usergroups what are allowed to see in the dimensions.

Now I want to create a role in wich are all the users but in this role there
should be limitations only for one dimension (Time), like all the users are
allowed to see the data only for the years 2003,2004 and 2005. I don't want
to change each of 140 roles when the users are/aren't allowed to see on
year / month. This can happen on a monthly basis.

The problem is that the olap make as default an OR between the roles so if
in the "standand" role the time dimension is not limited and in the time
role the time dimension is limited they will get all the time members.

Are there any solutions for this?

Thanks,
Radu

Hello.

Haven't tested this one, but it might be worth a try.

Try to create another Time Dimension (eg. TimeSecure) and add it to the
cube, linked to the fact table via the same Column and Key.
Then apply your security settings on this second dimension, which should
reduce the data shown as u desire. The former dimension security settings
should now be left untouched and merged with the new ones, the way you want.

It might even work with the new dimension set to invisible, so the user
doesn't even see a difference, but , just as mentioned in the first ... this
is just an untested idea :-)

Best regards

"Radu Colceriu" wrote: