Solved

Authorization in Analysis Services with MDX expression

Posted on 2011-03-03
3
200 Views
Last Modified: 2016-02-15
Hi,

I have created a salary cube for our organization in SSAS. There are two dimensions that are desirable to be access controlled. I have managed to cofigure controll for DIvisions, so that one Division see only it's salary. Person dimension is however not directly associated with organization dimension. This is because the same person can be employed at several divisions. So what I need is that the Division sees only its employes, not everybody in organization. For now. If they take away organization dimension, then they can pick any employee.

Does anybody have any suggestion?

Looking forward to hearing.

Regards,
Kostas Vilimas
0
Comment
Question by:kvilimas
  • 2
3 Comments
 
LVL 28

Accepted Solution

by:
Ryan McCauley earned 500 total points
Comment Utility
When we've needed to do this type of restriction in the past, we've done it by nesting values - you have a dimension that's "Division-Person" where you can expand a division, and then expand all the people within that division. However, we've never done this when a person can belong to multiple divisions, as this would cause some incorrect aggregation, since some people's salaries would be reported in multiple divisions and then rolled into the total multiple times.

How do you want people's salary reported when they're employed by multiple divisions - should their full salary be shown, or should a person's salary be divided equally among all the divisions that employ them?
0
 

Author Comment

by:kvilimas
Comment Utility
Well, this was a good idea with division-person. We don't need to allocate salaries as this is done explicitelly. If I were salaried by to divisions, my salary parts would be registered at both with their respective parts
0
 
LVL 28

Expert Comment

by:Ryan McCauley
Comment Utility
Then your totals should still be okay, since the person's salary is broken up by division, so it's never double-counted. I've never seen a way to "dynamically restrict" views to certain dimensions like this, other that nesting them and then restricting the top level.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

This is basically a blog post I wrote recently. I've found that SARGability is poorly understood, and since many people don't read blogs, I figured I'd post it here as an article. SARGable is an adjective in SQL that means that an item can be fou…
Use this article to create a batch file to backup a Microsoft SQL Server database to a Windows folder.  The folder can be on the local hard drive or on a network share.  This batch file will query the SQL server to get the current date & time and wi…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now