TM1 Forum

Hi,

In the Go_New_Stores cube, I've created new users and groups and have assigned each user to its group appropriately. I have then given 'WRITE' access to the cube, dimension and elements by setting their security assignment (by right-clicking Cubes, Dimension within the cube, and elements within each of the dimensions).

When I log in to the cube as the user, none of the data is displayed. That is, the cube is blank. However for the same view if I log in as Admin, all the data gets populated. I have verified that all the dimensions and the elements within each of the dimensions for that cube have been given 'WRITE' access for each of the users.

Could somebody please let me know why cube data is not displayed as this will help me take my task further. Appreciate your time and help.

Thanks

Did you accidentally create a cell security cube when you were setting security access to the cube? You certainly wouldn't be the first person to do it.

Yes I did declanr. Could you please guide me as to where I'm going wrong?

ViRa wrote:Yes I did declanr. Could you please guide me as to where I'm going wrong?

assuming that you don't want cell security you can just stop the service, delete the cell security cube from the directory and then restart it.

It is working now declanr! Thanks a lot for your time and guidance. Could you please let me know why cellsecurity caused the issue? This will help me learn.

I assume the cells in the Go_New_Stores are rule-generated and hence I'm not able to test the cells when I apply element security to it. Is that correct?

ViRa wrote:It is working now declanr! Thanks a lot for your time and guidance. Could you please let me know why cellsecurity caused the issue? This will help me learn.

I assume the cells in the Go_New_Stores are rule-generated and hence I'm not able to test the cells when I apply element security to it. Is that correct?

It wasn't really causing an issue as such - cell security is just another layer of security and I presume you hadn't given the user in question any access to the cells (e.g. they were assigned "none").
Having access to the cubes and dims/elements allowed them to see that a cell existed but the lack of read or write security in the cell security cube means they didn't have read or write access to it's contents.

Although... thinking about it, if the cell security cube was only just created and the cells were left blank then it should have been fine as its only when you specify "none" that they lose their access, was the cube created earlier as some sort of test where the users were assigned "none" access?
The other option is that the cell security cube was a complete red herring and it was actually just the server need a security refresh which would have happened automatically when you restarted it.

By the end of several workarounds, I ended up adding 'WRITE' to every cube (and the control objects) within the CellSecurity cube as 'WRITE'. Also since I read that for Element_Security cubes, if the cells are left blank the system would consider it as 'NONE', so I added 'WRITE' to those as well. I did perform a Security -> Refresh Security explicitly. However, only after deleting the Cell_Security and restarting the server the values were visible.

On another note, if I wanted to implement security such that user belonging to Australia sees only his data, Canada user sees only his data and so on, do I have to set element security? Could you please let me know?