Element Security Giving Access to All Ancestors

Post Reply
Jsanza
Posts: 6
Joined: Mon Nov 25, 2013 12:33 pm
OLAP Product: Oracle
Version: 10.1.1
Excel Version: 2010

Element Security Giving Access to All Ancestors

Post by Jsanza »

Hey guys,

I have a problem with my Element Security. If I give a user group WRITE access to an element in a dimension, TM1 automatically gives access to all ancestor elements as well all the way to the root level of the dimension. (Even though in the }Element Security, the cells for the ancestors are blank while 'WRITE' is in the cell for the element itself)

E.g.
All projects
-> A
->AA

If I only give access to AA, the user can see A and All Projects as well when browsing the dimension.

In my case, this behavior is unfavourable. In there any way how I can prevent this from happening?

Thanks
User avatar
jim wood
Site Admin
Posts: 3961
Joined: Wed May 14, 2008 1:51 pm
OLAP Product: TM1
Version: PA 2.0.7
Excel Version: Office 365
Location: 37 East 18th Street New York
Contact:

Re: Element Security Giving Access to All Ancestors

Post by jim wood »

Are you setting this security through performance modeler or through perspectives? I sounds like performance modeler. Have you tried updating it through perspectives?
Struggling through the quagmire of life to reach the other side of who knows where.
Go Build a PC
Jimbo PC Builds on YouTube
OS: Mac OS 11 PA Version: 2.0.7
Jsanza
Posts: 6
Joined: Mon Nov 25, 2013 12:33 pm
OLAP Product: Oracle
Version: 10.1.1
Excel Version: 2010

Re: Element Security Giving Access to All Ancestors

Post by Jsanza »

I set it through Architect and I'm using the }ElementSecurity cube.
tomok
MVP
Posts: 2836
Joined: Tue Feb 16, 2010 2:39 pm
OLAP Product: TM1, Palo
Version: Beginning of time thru 10.2
Excel Version: 2003-2007-2010-2013
Location: Atlanta, GA
Contact:

Re: Element Security Giving Access to All Ancestors

Post by tomok »

Are the users you are referring to in more than one security group? Is it possible one of the other groups they are in has read access to A and All Projects?
Tom O'Kelley - Manager Finance Systems
American Tower
http://www.onlinecourtreservations.com/
anand_rajappan
Posts: 1
Joined: Tue Oct 11, 2011 7:50 pm
OLAP Product: Cognos TM1, Cognos Planning
Version: 9-1 9-5-1 9-5-2 Cognos 8
Excel Version: Excel 2007

Re: Element Security Giving Access to All Ancestors

Post by anand_rajappan »

May be check whether the user is part of the Admin group. If so, irrespective of the security rights you have given he would have access to all the elements.
Jsanza
Posts: 6
Joined: Mon Nov 25, 2013 12:33 pm
OLAP Product: Oracle
Version: 10.1.1
Excel Version: 2010

Re: Element Security Giving Access to All Ancestors

Post by Jsanza »

The users do sometimes have access to more than one security group, but nobody has access to All Projects, and TM1 is giving all users access and they are not Admin either.
Post Reply