Solved

Authorization in Analysis Services with MDX expression

Posted on 2011-03-03
3
244 Views
Last Modified: 2016-02-15
Hi,

I have created a salary cube for our organization in SSAS. There are two dimensions that are desirable to be access controlled. I have managed to cofigure controll for DIvisions, so that one Division see only it's salary. Person dimension is however not directly associated with organization dimension. This is because the same person can be employed at several divisions. So what I need is that the Division sees only its employes, not everybody in organization. For now. If they take away organization dimension, then they can pick any employee.

Does anybody have any suggestion?

Looking forward to hearing.

Regards,
Kostas Vilimas
0
Comment
Question by:kvilimas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 28

Accepted Solution

by:
Ryan McCauley earned 500 total points
ID: 36030073
When we've needed to do this type of restriction in the past, we've done it by nesting values - you have a dimension that's "Division-Person" where you can expand a division, and then expand all the people within that division. However, we've never done this when a person can belong to multiple divisions, as this would cause some incorrect aggregation, since some people's salaries would be reported in multiple divisions and then rolled into the total multiple times.

How do you want people's salary reported when they're employed by multiple divisions - should their full salary be shown, or should a person's salary be divided equally among all the divisions that employ them?
0
 

Author Comment

by:kvilimas
ID: 36032733
Well, this was a good idea with division-person. We don't need to allocate salaries as this is done explicitelly. If I were salaried by to divisions, my salary parts would be registered at both with their respective parts
0
 
LVL 28

Expert Comment

by:Ryan McCauley
ID: 36034680
Then your totals should still be okay, since the person's salary is broken up by division, so it's never double-counted. I've never seen a way to "dynamically restrict" views to certain dimensions like this, other that nesting them and then restricting the top level.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Many to one in one row 2 46
grouping by date only 6 21
get count of orders by customer Sql Server table. 3 39
SQL query 45 27
This is basically a blog post I wrote recently. I've found that SARGability is poorly understood, and since many people don't read blogs, I figured I'd post it here as an article. SARGable is an adjective in SQL that means that an item can be fou…
If you have heard of RFC822 date formats, they can be quite a challenge in SQL Server. RFC822 is an Internet standard format for email message headers, including all dates within those headers. The RFC822 protocols are available in detail at:   ht…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question