Securing Cell Values - Microsoft SQL Server 2008 Analysis Services - page 748

Server

Administrators
Role

Database

Database
Permissions

Role

Cube

Cube
Permissions

Cell
Permissions

FIGURE 37.1

This hierarchy of objects is used to define cell security.

TABLE 37.1

Properties of the CellPermission Object

Name Description

MDX expression that resolves to a Boolean TRUE or FALSE value. When the
expression resolves to TRUE , a cell or group of cells covered by the expres-
sion is allowed by cell security. When the expression resolves to FALSE , the
cells are denied.

Expression

Can be one of the following values: Read : A user has read access to a cell;
ReadContingent : A user has read access to a cell only if that user has
access to the cells from which the current cell derives (we talk more about
contingent cell access later in this chapter); ReadWrite : A user has access
to the cell for read and write.

Access

Canada but does allow him access to values of the units sold measure. To do this, you can
use the following MDX code:

(NOT Measures.CurrentMember IS [Measures].[Store Sales])
OR (NOT [Store].[Store Country].CurrentMember
IS [Store].[Store Country].[Canada])