Securing Your Data in Analysis Services - Professional SQL Server Analysis Services 2005 with MDX - page 1009

hierarchize (exists ([Employee].[Employee].members,
strtomember
("[Employee].[login].[login].&["+username+"]")),
post).item (0).item (0).parent,
hierarchize (exists ([Employee].[Employee].members,
strtomember
("[Employee].[login].[login].&["+username+"]")),
post).item (0).item (0))
).item (0)
, employee.employee.currentmember))
> 0 ) or (strcomp
(employee.employee.currentmember.properties
("login"),username)
=0)
) // Value 2
The above MDX expression can be broken up into three different parts for
easier understanding. First, the MDX expression checks if the current user
logged in is a manager. If the user is a manager with more than two direct re-
ports, then value 1 expression is evaluated. If the user is a regular employee,
then value 2 expression is evaluated. This is done using the IIF statement.
The following MDX expression is used to identify if the current user is a man-
ager with more than two direct reports:
count (intersect (
descendants (
// Check if current employee is a manager
iif ( hierarchize (exists
([Employee].[Employee].members,
strtomember
("[Employee].[login].[login].&["+username+"]")),
post).item (0).item (0).parent.datamember is
hierarchize (exists ([Employee].[Employee].members,
strtomember