Solved

Authorization in Analysis Services with MDX expression

Posted on 2011-03-03
3
240 Views
Last Modified: 2016-02-15
Hi,

I have created a salary cube for our organization in SSAS. There are two dimensions that are desirable to be access controlled. I have managed to cofigure controll for DIvisions, so that one Division see only it's salary. Person dimension is however not directly associated with organization dimension. This is because the same person can be employed at several divisions. So what I need is that the Division sees only its employes, not everybody in organization. For now. If they take away organization dimension, then they can pick any employee.

Does anybody have any suggestion?

Looking forward to hearing.

Regards,
Kostas Vilimas
0
Comment
Question by:kvilimas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 28

Accepted Solution

by:
Ryan McCauley earned 500 total points
ID: 36030073
When we've needed to do this type of restriction in the past, we've done it by nesting values - you have a dimension that's "Division-Person" where you can expand a division, and then expand all the people within that division. However, we've never done this when a person can belong to multiple divisions, as this would cause some incorrect aggregation, since some people's salaries would be reported in multiple divisions and then rolled into the total multiple times.

How do you want people's salary reported when they're employed by multiple divisions - should their full salary be shown, or should a person's salary be divided equally among all the divisions that employ them?
0
 

Author Comment

by:kvilimas
ID: 36032733
Well, this was a good idea with division-person. We don't need to allocate salaries as this is done explicitelly. If I were salaried by to divisions, my salary parts would be registered at both with their respective parts
0
 
LVL 28

Expert Comment

by:Ryan McCauley
ID: 36034680
Then your totals should still be okay, since the person's salary is broken up by division, so it's never double-counted. I've never seen a way to "dynamically restrict" views to certain dimensions like this, other that nesting them and then restricting the top level.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sql Server group by 10 48
SQL DATEADD 10 80
Compare a column in results by values left of decimal 2 22
how to make geography query faster?  SQL 7 44
I have written a PowerShell script to "walk" the security structure of each SQL instance to find:         Each Login (Windows or SQL)             * Its Server Roles             * Every database to which the login is mapped             * The associated "Database User" for this …
There have been several questions about Large Transaction Log Files in SQL Server 2008, and how to get rid of them when disk space has become critical. This article will explain how to disable full recovery and implement simple recovery that carries…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question