Link to home
Start Free TrialLog in
Avatar of kvilimas
kvilimas

asked on

Authorization in Analysis Services with MDX expression

Hi,

I have created a salary cube for our organization in SSAS. There are two dimensions that are desirable to be access controlled. I have managed to cofigure controll for DIvisions, so that one Division see only it's salary. Person dimension is however not directly associated with organization dimension. This is because the same person can be employed at several divisions. So what I need is that the Division sees only its employes, not everybody in organization. For now. If they take away organization dimension, then they can pick any employee.

Does anybody have any suggestion?

Looking forward to hearing.

Regards,
Kostas Vilimas
ASKER CERTIFIED SOLUTION
Avatar of Ryan McCauley
Ryan McCauley
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of kvilimas
kvilimas

ASKER

Well, this was a good idea with division-person. We don't need to allocate salaries as this is done explicitelly. If I were salaried by to divisions, my salary parts would be registered at both with their respective parts
Then your totals should still be okay, since the person's salary is broken up by division, so it's never double-counted. I've never seen a way to "dynamically restrict" views to certain dimensions like this, other that nesting them and then restricting the top level.