Interaction of element and cell security rules

Post Reply
David Usherwood
Site Admin
Posts: 1453
Joined: Wed May 28, 2008 9:09 am

Interaction of element and cell security rules

Post by David Usherwood »

Had a client come through with something rather odd.
They have security groups dividing up access by cost centre. So in the cost centre security rules, we have

['Div1Grp'] = s: if(elisanc('CC','Div1',!CC) = 1 % !CC @= 'Div1',
'WRITE',
#ELSE
'READ'
);
which works fine. But in the salaries cube (dimensioned by staff member and CC) they want something tighter ie
['Div1Grp'] = s: if(elisanc('CC','Div1',!CC) = 1 % !CC @= 'Div1',
'READ',
#ELSE
'NONE'
);

On the main cube, putting users in more than one 'divisional' security group works fine, they can work with CCs under each division. But in the salaries cube, if users are in more than one 'divisional' security group, they get access only to the _last_ group.

Views welcome. If I haven't explained it clearly, ask and I'll try to provide moredetails. I've played around with FEEDSTRINGS which did nothing (as usual). I feel an SR coming....
User avatar
Steve Vincent
Site Admin
Posts: 1054
Joined: Mon May 12, 2008 8:33 am
OLAP Product: TM1
Version: 10.2.2 FP1
Excel Version: 2010
Location: UK

Re: Interaction of element and cell security rules

Post by Steve Vincent »

Have you got multiple sections in one rule file for the same group?
If this were a dictatorship, it would be a heck of a lot easier, just so long as I'm the dictator.
Production: Planning Analytics 64 bit 2.0.5, Windows 2016 Server. Excel 2016, IE11 for t'internet
David Usherwood
Site Admin
Posts: 1453
Joined: Wed May 28, 2008 9:09 am

Re: Interaction of element and cell security rules

Post by David Usherwood »

No - but the user is in 2 groups, which is the broken bit.
belair22
Posts: 68
Joined: Wed Feb 25, 2009 2:26 am
OLAP Product: TM1, Cognos Express
Version: 9.5 9.4 9.1 9.0 8.4
Excel Version: 2007 2003

Re: Interaction of element and cell security rules

Post by belair22 »

Appears you have defined 2 different types of security:

* Dimension security (Cost Centre dim)
* Cell level cube security (Salaries cube)

From the example below there's going to be a conflict in these rules - i'd have assumed the cell level security would have taken precedence (might not be the case). I'd suggest using the rules tracer on the Salaries Cube cell security to see what's happening.
Marcus Scherer
Community Contributor
Posts: 126
Joined: Sun Jun 29, 2008 9:33 am
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2016
Location: Karlsruhe

Re: Interaction of element and cell security rules

Post by Marcus Scherer »

Would the tighter rule work for the main cube?
Post Reply