composite rights using msas dimension security
- Hello,In my sales cube I have about 10 dimensions: vendors, materials, managers, stores etc.Generally, users needs to view information from one dimensions. So, using the role manager, I easily configure via custom dimension security.Examples (2 different users ):User No 1 views information only about vendors: "Sanitex", "Unilever".User No 2 views information only about stores: "Store No 300" and "Store No 555".my problem is:user No 3 is a head of users 1 and 2. he would like to see information about vendors ("Sanitex" and "Unilever") or (stores no 300 and store no 555).Is it possible to implement such composite security?? Have anybode some experience about that??Ramunas
-
This was removed by the editor as SPAM
-
Yes, this is possible.
The cube role editor allows you to restrict on multiple dimensions at a time.
Open cube role manager, click restricted dimensions for the user/group and then under the Rule heading select customer for all the dimensions you want to restrict, then make your selections.
-
As I undrestand, you offer to restict access to a particular dimension. But when I set do it, user cannot see the dimension absolutely.
I have situation like this:
user 3 should read only 2 vendors and all other dimensions;
or
user 3 should read only 2 stores and all other dimensions;
If you have an example about that, could you please send me the script?
Thank you.
Ramunas
-
For this case you need to create two different roles, one restricted to the two particular stores but no restriction on any other dimensions; the other restricted to the two vendors and no other dimensions restricted.
Steve.
-
But when I add my user to these 2 roles, this user can see all data, because he can view union of 2 roles.
As I said, I need that one user should view all stores but 2 vendors or all vendors and 2 stores.
Any ideas?
Ramunas
-
To clarify, is this only one user who needs to be looking at all stores but only two vendors, but when focusing on vendors he/she can see them all but only two stores? Or is it two different users, one of which can see all stores but only two vendors; the other can see all vendors but only two stores?
If it's the latter, then go with what wildh posted, create two roles (one for each user type) and within role1, set the vendor dimension to a limited subset; and in role2 set the vendor dimension to a limited subset. Remember to put each user in only one role.
If it's the former, i'm honestly not sure how you'd do it with roles. One alternate method would be to combine the vendor and store dims (if possible) so that there is a relationship between the two. But for more than one user this would mean creating dims specifically per user type
Steve.
-
Steve,
this is the former.
The partialy solution is to create 2 roles with appropriate permissions. I need 2 applications with 2 connection string with ROLE keyword specified in the connection string.
Ramunas
-
if you're considering doing that then why not create the two roles and create a virtual cube from the physical, and apply role1 to cube 1 and role 2 to cube 2(virtual)?
Steve.
Viewing 9 posts - 1 through 8 (of 8 total)
You must be logged in to reply to this topic. Login to reply