TM1 Forum

Hi, I was wondering if it was possible to create a Cell-level security cube from a TI process? At present I'm creating them via the Server Explorer -> Security -> Create Cell Security Cube path.

Thanks!

No. You need to use the Architect or Perspectives user interface to create any system cube (those that start with "}") whether it is for attributes, securty, or drill throughs. However, once created, you are free to update them any way you want. whether through the UI or via TI or rules.

That's what I was afraid of.

Thanks for the reply!

You can add in '}' control object and security cubes with TI but they will not be seen by the security model until a security refresh or server restart.

lotsaram wrote:You can add in '}' control object and security cubes with TI but they will not be seen by the security model until a security refresh or server restart.

Do those at your own peril. Some may work but others won't. It's not worth the risk. Modifying the security cube itself via TI is highly desirable but why would you need to decide if a cube and/or dimension is worth securing on the fly? It's either worthy of security or it isn't. Not much to be gained from making that decsion dynamically.

Just my 10 cents (I know this post is old already).

From an implementation point of view, some will be needing this to happen. There will come a time when you will need to duplicate cubes - and at the same time - duplicate the security. Which is why if only TI has a feature like this - then we can automate this process for each cube that we need to create.

Besides, TM1 already gave an API for Element Security. Why not for Cell Security?

It's not useless and there's something worth it to be gained. Systems and requirements evolve. Design needs change sometimes. Nothing is perfect.

I think you should be able to create such cell security cube by using CubeCreate ti function with using "}" in control cube name (same }cellsecurity_<cubename>), the dimension sequence used in this ti function probably matters.

VickyFan wrote:I think you should be able to create such cell security cube by using CubeCreate ti function with using "}" in control cube name (same }cellsecurity_<cubename>), the dimension sequence used in this ti function probably matters.

I believe that Lotsaram and Tomok addressed that option in their posts above, including the limitation (the need to at least do a security refresh) that Lotsaram mentioned.

rmwachter wrote:Hi, I was wondering if it was possible to create a Cell-level security cube from a TI process? At present I'm creating them via the Server Explorer -> Security -> Create Cell Security Cube path.

Thanks!

Hi,

I am actually using a such security for one of my clients. The process destroys CellSecurity Cubes, recreates them and then fills them with data.

Works fine for me!

Don't forget to refresh Security at the end of you process.

Omar

Resurrecting an old post but just in case someone should search for "TI function to create cell security cube" this now exists as it was introduced in 10.2
http://www-01.ibm.com/support/knowledge ... reate.html
The function is called CellSecurityCubeCreate and has the 2 arguments CellSecurityCubeCreate(‘Cube’, ‘dimension map’);
"Dimension Map" is in the form of a true/false colon delimited array e.g. for a cube with 5 dimensions '0:1:0:0:1' which will create a cell security cube containing only the 2nd and 5th dimensions of the target cube. This is a significant enhancement as it makes cell security cubes much more compact and able to be maintained by TI data entry or even manual entry, previously cell security maintenance was only really possible via rules.

The TI function is the only way to create a lesser dimensioned cell security cube. The right-click create cell security cube option in the security context menu will still create the "old fashioned" cell security cube.

Also thankfully a CellSecurityCubeDestroy function was also introduced. Gone are the days where the only way to remove cell security once implemented was to shut down the server and delete the .cub file.

Thanks a lot,lotsaram.

In order to update a security cube with a TI process, you need to use

ElementSecurityPut(Level, DimName, ElName, Group);

Simple CellPutS will not work (and will not generate logs error).

Xavier 13 wrote: ↑Mon Mar 16, 2020 3:09 pm In order to update a security cube with a TI process, you need to use

ElementSecurityPut(Level, DimName, ElName, Group);

Simple CellPutS will not work (and will not generate logs error).

I'm not sure what kind of drugs you are smoking but ...
1/ of course CellPutS will work to update a security cube (any type of security cube)
2/ the thread is in relation to cell security not element security, ElementSecurityPut ain't gonna work for a cell security cube
3/ yes if you are talking about creating a element security cube then using the ElementSecurityPut function is the way to do it via TI
4/ regardless of CellPutS, ElementSecurityPut or CellSecurityCubeCreate, in order to work the "Security Access" option for the TI must be enabled