Solved

Authorization in Analysis Services with MDX expression

Posted on 2011-03-03
3
224 Views
Last Modified: 2016-02-15
Hi,

I have created a salary cube for our organization in SSAS. There are two dimensions that are desirable to be access controlled. I have managed to cofigure controll for DIvisions, so that one Division see only it's salary. Person dimension is however not directly associated with organization dimension. This is because the same person can be employed at several divisions. So what I need is that the Division sees only its employes, not everybody in organization. For now. If they take away organization dimension, then they can pick any employee.

Does anybody have any suggestion?

Looking forward to hearing.

Regards,
Kostas Vilimas
0
Comment
Question by:kvilimas
  • 2
3 Comments
 
LVL 28

Accepted Solution

by:
Ryan McCauley earned 500 total points
ID: 36030073
When we've needed to do this type of restriction in the past, we've done it by nesting values - you have a dimension that's "Division-Person" where you can expand a division, and then expand all the people within that division. However, we've never done this when a person can belong to multiple divisions, as this would cause some incorrect aggregation, since some people's salaries would be reported in multiple divisions and then rolled into the total multiple times.

How do you want people's salary reported when they're employed by multiple divisions - should their full salary be shown, or should a person's salary be divided equally among all the divisions that employ them?
0
 

Author Comment

by:kvilimas
ID: 36032733
Well, this was a good idea with division-person. We don't need to allocate salaries as this is done explicitelly. If I were salaried by to divisions, my salary parts would be registered at both with their respective parts
0
 
LVL 28

Expert Comment

by:Ryan McCauley
ID: 36034680
Then your totals should still be okay, since the person's salary is broken up by division, so it's never double-counted. I've never seen a way to "dynamically restrict" views to certain dimensions like this, other that nesting them and then restricting the top level.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After restoring a Microsoft SQL Server database (.bak) from backup or attaching .mdf file, you may run into "Error '15023' User or role already exists in the current database" when you use the "User Mapping" SQL Management Studio functionality to al…
In this article I will describe the Detach & Attach method as one possible migration process and I will add the extra tasks needed for an upgrade when and where is applied so it will cover all.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question