TM1 Forum

Code: Select all

[] = S:IF(DB('}ClientGroups', !}Clients, !}Groups) @= '',
	STET,
	CONTINUE);

[] = S:DB('}CubeSecurity', !}Cubes, !}Groups);

Code: Select all

vCube_1 = '}CubeSecurity';
vCube_2 = '}CubeSecurity_2';
vCube_3 = '}CubeSecurity_3';


If( CubeExists( vCube_1 ) = 0 );
   LogOutput( 'INFO', Expand( 'Cube ''%vCube_1%'' not found, implying no security set for cubes.' ));
   ProcessQuit;
EndIf;

If( CubeExists( vCube_2 ) = 0 );
    CubeCreate( vCube_2, '}Cubes', '}Clients' );
Else;
    CellPutS( 'NO', '}CubeProperties', vCube_2, 'LOGGING' );
    CubeClearData( vCube_2 );
EndIf;


If( CubeExists( vCube_3 ) = 0 );
    CubeCreate( vCube_3, '}Cubes', '}Groups', '}Clients' );
Else;
    CellPutS( 'NO', '}CubeProperties', vCube_3, 'LOGGING' );
    CubeClearData( vCube_3 );
EndIf;

# loop over cubes
vDim_Cube = '}Cubes';
c = 1;
While( c <= Dimsiz( vDim_Cube ));

   vCube = Dimnm( vDim_Cube, c );

   # loop over clients
   vDim_Client = '}Clients';
   cl = 1;
   While( cl <= Dimsiz( vDim_Client ));

      vClient = Dimnm( vDim_Client, cl );

      # loop over groups
      vAccess_ByClient = '';
      vDim_Group = '}Groups';
      g = 1;
      While( g <= Dimsiz( vDim_Group ));

         vGroup = Dimnm( vDim_Group, g );

         # get access and store in cube 3
         vAccess_ByGroup = Upper( CellGetS( vCube_1, vCube, vGroup ));
         If( vAccess_ByGroup @<> '' );
            CellPutS( vAccess_ByGroup,  vCube_3, vCube, vGroup, vClient );
         EndIf;

         # for cube 2: derive the access by client
         If( vAccess_ByGroup @= 'ADMIN' );
             If( Scan( vAccess_ByClient, 'ADMIN' ) = 0 );
                 vAccess_ByClient = 'ADMIN';
             EndIf;

         ElseIf( vAccess_ByGroup @= 'LOCK' );
             If( Scan( vAccess_ByClient, 'LOCK_ADMIN' ) = 0 );
                 vAccess_ByClient = 'LOCK';
             EndIf;

         ElseIf( vAccess_ByGroup @= 'RESERVE' );
             If( Scan( vAccess_ByClient, 'RESERVE_LOCK_ADMIN' ) = 0 );
                 vAccess_ByClient = 'RESERVE';
             EndIf;

         ElseIf( vAccess_ByGroup @= 'WRITE' );
             If( Scan( vAccess_ByClient, 'WRITE_RESERVE_LOCK_ADMIN' ) = 0 );
                 vAccess_ByClient = 'WRITE';
             EndIf;

         ElseIf( vAccess_ByGroup @= 'READ' );
             If( Scan( vAccess_ByClient, 'READ_WRITE_RESERVE_LOCK_ADMIN' ) <= 1 );
                 vAccess_ByClient = 'READ';
             EndIf;

         EndIf;

         g = g + 1;
      End;

      # get access and store in cube 2
      If( vAccess_ByClient @<> '' );
         CellPutS( vAccess_ByClient,  vCube_2, vCube, vClient );
      EndIf;

      cl = cl + 1;
   End;

   c = c + 1;
End;

# turn on cube logging (for what it's worth)
CellPutS( 'YES', '}CubeProperties', vCube_2, 'LOGGING' );
CellPutS( 'YES', '}CubeProperties', vCube_3, 'LOGGING' );