Re: Problem securing measures in SSAS 2005

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Hi Kenial,

I'm well experienced in setting up security in AS 2005.
I'm not sure but I think I had the same problem in AS 2000 and solved it by
setting up security programmatically.
And obviously I'm not the only one who run into this problem. There is an
other thread here ("Bug in SSAS 2005 Security Setup") that describes this
problem and how to reproduce it in detail.

But for the moment my customer knows about this issue and will handle
measure security with care...

Regards,
Wim

"Kenial" wrote:

hmm.. I can't take your point. Wouldn't setting be adopted? Do you mean,
changes saved on your project, but cube didn't reflect that changes? Or
not, was your working disappeared?

if you don't have ever been experienced in security works of AS2005, you
can start with this articles :

SQL Server 2005 Books Online :: Granting User Access
http://technet.microsoft.com/en-us/library/ms175408.aspx


May the security be with you : )

+---------------------------------

Kenial.GhostOnNetwork.



wim wrote:
Hello Kenial,

Thank you for your reply.

I found the reason of my first problem on my own.
If you start securing measure items you should be cautious in using these
measure items in the NonEmptyBehaviour property of calculated members. Doing
so results in the mentioned error message if a user who isn't allowed to see
the measure item queries the cube. In this case Analysis Server isn't able to
resolve the NonEmptyBehaviour property of the calculated member and throws
the exception.

But still I have the problem after setting up security of specific measure
items for the first time. Any subsequent changes to these specific measure
items won't be adopted by Analysis Services. After reopening the dimension
data security pane there are still the old settings.

"Kenial" wrote:

Hello Wim.

hmm... I'm not sure that you mentioned about cell data security. Where
did you apply your MDX script at? I couldn't understand Deutsch so that
not suggetion any useful things.

If you want to display dimenstion's name and not about cell data
simultaneously, cell data security option will be good choice. cell data
tab is in Role Designer.

+---------------------------------

Kenial.GhostOnNetwork.



wim wrote:
Hello,

I'm working with a SSAS 2005 OLAP Cube (1 fact table, 4 measures and about 9
dimensions) and want to set up dimension data based security.
Securing several items of a dimension works fine but when I want to secure a
special measure I'm not able to view the cube with this role any more. The
only thing I get is an error message like this: "MdxScript([Cubename]) (10,
24) Die [Measurename]-Dimension wurde beim Analysieren der Zeichenfolge
'[Measurename]' nicht im Cube gefunden" where Measurename is the name of the
measure that was secured.

Also, after setting up measure security for the first time I'm not able to
remove or change these settings again until I delete the complete role and
recreate it.

Can anybody help me or is there a known work around?

Wim

.



Relevant Pages

  • Re: Help Needed with Dynamic Dimension Security
    ... business application for securing members. ... and the point in the hierarchy where the security ... > of using Dimension Security with a Virtual Cube. ...
    (microsoft.public.sqlserver.olap)
  • Re: Role Security confusion
    ... > I have a test model, with a client dimension. ... > With a normal dimension (added in the cube editor) if i "Test Role" ... when I created a Partition with only data for the "named client" ... > file/group active directory security happening here that I dont expect. ...
    (microsoft.public.sqlserver.olap)
  • Re: Customizing Cube Functions (Security, Access)
    ... I need help with Cube Functions. ... > a dimension, other user see all levels or dont see anything. ... > In cube functions i choose a User, in dimension tab i choose the dimension to ... > This is a common problem that I have: Security of all cubes. ...
    (microsoft.public.sqlserver.olap)
  • Re: Role Security confusion
    ... It's hard to say without being able to take a look at your cube. ... First- make sure you're defining security on the cube dimension. ...
    (microsoft.public.sqlserver.olap)
  • RE: Dynamic Security: how to detect Missing members in 64bit AS2K
    ... > you are right the membership is based on a group and we have seen ... > possibility that members of this group where not appearing on the security ... > dimension can not get access anymore.... ... >> the cube. ...
    (microsoft.public.sqlserver.olap)