TM1 Forum

Hi Steve, Thanks for your remind. I should add rule [ 'Final' ] = N: STET ; to avoid other cross version rules. And only Admin should be able to remove the lock. Best regards, Learn_TM1 Just one thing on Lock, it is the simplest approach but you need to make sure that there are no cross version rule...

Hi Wim,

I just realize that I understood the Paul's answer in the wrong way. The rule [ 'Final' ] = N: STET ; is in any way necessary. So that the conclusion should be:
1. Add rule [ 'Final' ] = N: STET ; at the top of the Rules;
2. Lock "Final" element.

Best regards,

Learn_TM1

Hi Paul, Thanks a lot for your details answer. It gives me a big help. I would like to use "Lock" option. This feature is unknown for me. I tried it in one test system. If I set one element as "Lock", even admin can't change the data with it. So that the rule [ 'Final' ] = N: STE...

Dear all, I am wondering, is it possible to make a hard copy of the data? The situation is so, there is one Version dimension in our TM1 system. Set 2 elements: "final" and "working" to "Version". One day, the "working" data should be copied to "final&quo...

The problem has been solved. The rootcause is that user has special letters in his password. Cognos can't recognize it. If he changes his password with normal letters, he can login Cognos.

Thanks for your concern.

Hi all, There is one strange case here. One user changed his password. He can login other apps, only can't login TM1. If he logs in TM1 Web, it shows: Login failed, please try again. If he logs in Perspectives, it shows: Server principal name (SPN) or the security context of the destination server c...

Could some one give me the official IBM document about the work mechanism of CellSecurity? It seems that the CellSecurity works different as DimensionSecurity and ElementSecurity. For the DimensionSecurity, it sets all Dimension to all user groups to WRITE. Then different ElementSecurity can block t...

Thanks qml.

I will raise a PMR to IBM.

HThe rule in my last post uses the empty single quotes, because I want to cover the condition, when the ElementSecurity sets neither READ nor WRITE, but Empty. But this logic doesn't work anyway. So I changed it. In fact, I meant this: IF(DB('}ElementSecurity_dim1,!Version,!Groups') The second sing...

Hi qml, Thanks for your responds. I only tried it in test environment. If it works, I will bring it to prod environment. I am sure that this user is not active on test environment, because he is on vacation for one week. ;) We are using TM1 10.2.2. There is already Fix Pack 5 released. Are there som...

Hi Wim, The problem has been solved. It really needs to consider the comprehensive conditions for the rules of CellSecurity cube, in order to take over the authentication of ElementSecurity and also fulfill the specified requirement of CellSecurity. The rule in my last post uses the empty single quo...

When we used TM1 9.x, TM1TOP works correctly. Let me repeat once again, in case you missed it. You do not have a problem with TM1Top. Rather, you have a problem with user threads not being terminated properly. I added IdleConnectionTimeOutSeconds = 28800 to tm1.cfg yesterday, no service restart. Bu...

Hi qml,

Thanks for your responds.

Our TM1 is version 10.2.2. When we used TM1 9.x, TM1TOP works correctly.

Best regards,

Learn_TM1

Is it possible to write one rule in }CellSecurity_cube1, which takes the security setting from the }ElementSecurity_dim? Could some one give me one example how to write it? Many thanks. I tried to add the following rules to }CellSecurity_cube1: [] = S:IF(DB('}ElementSecurity_dim1,!Version,!Groups')@...

Hi all, If I build the }CellSecurity_cube1 for the cube1, the }ElementSecurity_dim1, }ElementSecurity_dim2 and etc don't work anymore. Is it correct? For example dim1 is year dimension, dim2 is datatype dimension. For "2016" in dim1, "d1" in dim2, if }CellSecurity_cube1 sets the ...

I am not sure if we are using CAM for authentication. The relevant settings in the cfg file are: SecurityPackageName=Kerberos IntegratedSecurityMode=2 The comment shows that 2 is used for integrated and native authentication. If I add IdleConnectionTimeOutSeconds = 28800 to cfg file, which means aft...

Hi qml, Thanks for your reply. The client application is Perspectives. Some users also use TM1 Web. This problem bothers me, because there are so many dead sessions showing in TM1TOP so that I can't find out which user is active. Where to set parameter IdleConnectionTimeOutSeconds? If this parameter...

Hi all,

We are using TM1 10.2. The TM1TOP shows the repeated logins. Even the user has been logged out, TM1TOP still shows the user as login. How to let TM1TOP reflect the real users login status?

Thanks.

Best regards,

Learn_TM1

Hi Paul,

Thanks for your responds. The link is very helpful.

Best regards,

Learn_TM1

Hi all,

As we know, SaveDataAll will saves all TM1® data from server memory to disk. Will it free the memory for server, after this function runs?

Best regards,

Learn_TM1