Securing Dimension Data - Microsoft SQL Server 2008 Analysis Services - page 743

This expression uses the StrToMemeber MDX function to get a member of the Employee
attribute hierarchy from the member of the User Name attribute hierarchy that you
construct from the string returned by the UserName MDX function. The expression then
maps the members of the Employee attribute hierarchy to the corresponding members of
the Store attribute hierarchy. As the last step, the expression uses the Filter function to
get member of the Store dimension that has a key corresponding to the key of Employee
dimension member.

NOTE
The MDX expression used in the AllowedSet or DeniedSet property of an
AttributePermission object must be valid. If your expression contains an error,
dimension security disables access to all members of the dimension.

Now that we have dynamically defined dimension security, when you browse the data as a
user of the DynamicRole role, you see only the data associated with your username. For
example, Figure 36.13 displays data only for store 12, located in Mexico, because user Irina
Gorbach (under whose credentials we are browsing) happens to work in that store.

Only one store is shown

FIGURE 36.13

Members that do not correspond to the store where Irina Gorbach works are

secured.