Security - default view

[Jayme1]

Hello Everyone, I hope that you can all help

I have a cube which shows the group P+L

I have a default view which is the top hierarchy for all dimensions - for example Total cost centers in the cost center dimension

This is perfect for most people using the system. however i have to let someone (my mate Dave) onto the system and I only want to give them access to Facilities cost centers which is a child of Total Cost center.

I therefore put "none" access to all elements in the Cost center dimension except for giving read access to facilities cost centers.

I want to keep the default view as Total cost centers. however when Dave trys to enter a cube he cannot have access as the default is on Total cost centers which he doesn't have access to.

is there a way around this without having to change my default view? so for example having Tota cost centres heirachy for dave to only be roll up of the elements he has access to, I.E facilities?


Thanks for your help everyone

Jayme

[tomok]

All Dave has to do is click OK on the message telling him he doesn't have access, then click the Show All icon, select the Facilities cost center, then save this newly configured view as his "private" default view. If you have a private default view on a cube it will always take precedence over a public one.

[Jayme1]

Hello

I did try that but it still doesn't let me


it come up and says "default: No Read Access to elements, cannot view.


as soon as i change default view to being facilities then it works.

[lotsaram]

All Dave has to do is click OK on the message telling him he doesn't have access, then click the Show All icon, select the Facilities cost center, then save this newly configured view as his "private" default view. If you have a private default view on a cube it will always take precedence over a public one.

Depends on the interface, you can get away with it in Perspectives but in TM1 Web if the view doesn't work then there's no way to get around it.

I want to keep the default view as Total cost centers. however when Dave trys to enter a cube he cannot have access as the default is on Total cost centers which he doesn't have access to.
is there a way around this without having to change my default view? so for example having Tota cost centres heirachy for dave to only be roll up of the elements he has access to, I.E facilities?

Basically no, you have to change the default view. If you are using element security then for those dimensions where element security is applied you need to make sure that public subsets that are used in public views will contain at least 1 visible element for all users regardless of role profile.

[Jayme1]

Thanks for the reply

I am using perspective, using cognos express

so how can i set up a universal view with element security

say i have dimension of cost center - with 1 hierarchy of "total cost center" and then three cost centers as childs

i have three users, each only to have access to their individual cost center.

there is no default view that will give them access to their individual cost center without giving them access to "total cost center"?

[tomok]

Is the Cost Center dimension a title dimension in the view or is it on the rows and/or columns? If it is a title dimension you can change it to a subset that lists all the elements, with Total Cost Centers at the top of the list. If it's a title dimension then it's only going to show one cost center so it doesn't matter if the subset lists all of them. Users that have access to Total Cost Centers will default to it and users that only have access to one cost center will default to that one element. If Cost Centers is on the rows or columns then you're out of luck.

[qml]

Doing it dynamically is quite easy, but it takes a bit of work and might not be worth it in every situation. The steps are as follows:

1) Create a text attribute against your cost_centre dimension, let's call it default_display for the sake of this solution.
2) Build a lookup cube that has the cost_centre dimension and either }Clients or, better yet, a copy of }Clients, let's call the dimension Users.
3) Populate the cube with a TI or manually in such a way that every user has a flag (let's say 'Y' - to store strings you'll need one more dimension in the cube) against all the elements they should see in their default view (so literally every user can have a different list of cost centres). Ideally you should create a bit of logic that updates this cube with every security update.
4) Create a rule on the cost_centre attribute cube that populates the default_display attribute based on the lookup cube. And here's the trick: you use TM1USER() function to pass the }Client to get personalised values of the attribute. It will effectively have different values for each person.
5) You define the Default view in such a way that it uses a dynamic subset for cost_center. The dynamic subset should be defined to return all the elements that have the flag set to the value you chose. You can easily record a subset like that in Subset Editor, there is no need to write MDX yourself if you don't want to.

[Tilo]

Hello qml,

are there limits to your technique to have different values for different users in the same cell?
We used it, too, for our cell security, but in TM1 10.2.2 it seems to cause Problems that I described in this thread:
http://www.tm1forum.com/viewtopic.php?f ... 215#p57215

Thanks
Tilo