TM1 Forum

I have written a rule that sets WRITE or NONE in control cube }ElementSecurity_Organization
This works. Users see only their branch of the organization structure.

But, when I have a generic report set to the top element, when a restricted user opens the report, they see nothing in the dimesnion cell. But if they click open the subset editor, they see the top element in their Security Setting.

This is almost what I want to happen. It restricts the user, but not nicely.

Is there some way to create a subset that recognizes the users group? I'm guessing MDX, but I didn't see any commends that dealt with current user.

AFAIK, there is no way to do this with MDX. Keep in mind, there isn't just one group for a user, there can be multiple ones. I know how to create an MDX query on the }Groups dimension that returns all the group elements that a users belongs to but why do this? What I would do in your scenario is to create a "dummy" element called "Select an organization", or "Double click here to select organization", etc. in the Organization dimension and give everone READ rights to it and make the report open to that element. Then the cell is not blank and the user knows to click on the cell to select organization.

That's a clever idea. I'll try that.
Thanks.