Database Reference
In-Depth Information
Managing dimension hierarchy-level
security
So far so good; you've allowed cube-level access to users, but this might only be a
part of the battle. Cube-level access does not restrict any dimensions or attributes.
This means that each employee could see not only those sales that he/she is directly
responsible for, but also the sales of his/her peers and managers. Furthermore, not all
employees need to see highly sensitive data such as salaries and commission rates.
You can manage access to dimensions using the
Dimension Data
tab within the
Role
Properties
dialog. The same dialog also has the
Dimensions
tab that is used less
frequently and allows you to specify write access if the dimension write-back is con-
figured; otherwise, all dimensions are available for read-only access. The
Dimension
Data
tab, on the other hand, is for securing individual dimension attribute hierarchy
members.
You will begin by implementing a simple requirement of only allowing the role to see
bikes and accessories product categories in the sample database. The section that
follows will examine a somewhat more complex requirement of dynamic security.
How to do it...
To restrict a role to see sales only for bikes and accessories, perform the following
steps:
1. Create a new role within
Adventure Works DW2012
sample database and
add a member, as shown earlier in this chapter.
2. Grant access to
Read definition
on the
General
page.
3. Grant the
Read
access to the
Adventure Works
cube on the
Cubes
page.
4. Navigate to the
Dimension Data
page. Take a moment to notice that this
dropdown lists database dimensions as well as cube dimensions. Recall that
each database dimension may or may not be included in each cube. Cube di-
mension's properties do not necessarily have to match the properties of the
database dimension. If you define security at the database dimension level,
the same security configuration will be applied to the corresponding cube di-
mensions as well.
5. Select the
Product
database dimension from the
Dimension
drop-down list.
Search WWH ::
Custom Search