Securing Your Cube Project - Getting Started with SQL Server 2012 Cube Development - page 213

4. Switch to the Advanced view and review the results. As you can see, the
following code is added to the Denied member set:
{[Measures].[Order Quantity - Fact
Reseller Sales], [Measures].[Unit Price -
Fact Reseller Sales],
[Measures].[Extended Amount - Fact
Reseller Sales], [Measures].[Discount
Amount - Fact Reseller Sales],
[Measures].[Product Standard Cost - Fact
Reseller Sales], [Measures].[Total
Product Cost - Fact Reseller Sales],
[Measures].[Tax Amt - Fact Reseller
Sales], [Measures].[Freight - Fact
Reseller Sales], [Measures].[Fact
Reseller Sales Count],
[Measures].[Fact Internet Sales Reason
Count]}
5. Deploy the project.
6. To test the security, double-click on the Adventure Works DW2012.cube file
in the Solution Explorer window.
7. Click the Browser tab and then click on the Change User button.
8. In the Security Context dialog, click on the Roles radio button and select
the Internet Sales Readers in the drop-down list and click on OK .
9. Review the available objects in the Metadata browser. As you now can see,
all the objects within the Fact Reseller Sales measure group are missing ex-
cept for Sales Amount - Fact Reseller Sales .
This is an easy way to change the access to specific measures. However, in this
case,youcanstillaccesscalculatedmeasuresaswellasthe [Measures].[Sales
Amount - Fact Reseller Sales] measure. To limit access to these objects,
perform the following steps:
1. Switchto Internet Sales Readers.role andclickonthe Dimension Data tab.
Uncheck the Sales Amount - Fact Reseller Sales measure and deploy the
project.
2. Double-clickonthe Adventure Works DW2012.cube fileinthe Solution Ex-
plorer window.