Security matter

[zbhmida]

Hi

I'm trying to put security on cellsecurity cube,

I ll describe the case:
- i'have a security for cube A on }CubeSecutity for a cube implemented by Rules: the access right is WRITE
- i'have a }CellSecurity for element on the cube A for Two elements
- Element x ==> Write
- Element y ==> <Empty>
- when i m affected to this group i can see and put data for element x and element y but this is not what i expect, normally i should have the access only for element x
- i'have also verified on the }CubeSecurityProprities what i have on CELLSECURITYDEFAULTVALUE => NONE

So normally the default acces right is a NONE, but unfortunally i have WRITE, its seems that it s heritate from }Cubesecurity but not working, i have tried to recreate the cell security, also a have tried to restart the server but some problem,

Best regards,
Zied

[burnstripe]

If the cube property CELLSECURITYDEFAULTVALUE is left empty, this also defaults users to have no access (none).

Are there multiple groups assigned to the user? If a user has read/write access through one of the other groups they will still have read/write access by default.

Do you have any tm1 applications deployed via performance modeler? The TM1 application overlay could be overriding the cellsecurity? From memory this would show up in the cube properties. Think it's the data reservation section

[zbhmida]

Thank for reply

I ve cheked thé user is assigned to one groups,
No perf modeler,

Isn't a bug on this PA version ?

Best regards
Zied

[burnstripe]

Any user groups have admin rights set for the cube in question? Any groups with admin rights to the cube will have write access to the cell regardless of cell security

[Steve Rowe]

Or you are in the admin group itself of couse

[zbhmida]

Hi All,

Thanks for your reply,

Well it works after a server TM1 restart,

i forget to specifie, the Cell Security is a specific CellCubeSecurity that doesn't contain all dimensions,

Best regards,
Zied