COGNOiSe.com - The IBM Cognos Community

Legacy Business Intelligence => COGNOS Transformer => Topic started by: german_cognaut on 04 Dec 2008 07:13:42 AM

Title: Cube Security Issue with UserViews in C8
Post by: german_cognaut on 04 Dec 2008 07:13:42 AM
Hello everyone,
I have a tricky Question:
Lets say we have a simple sales hierarchie with different countries on the first level.
(USA, Canada, France, Germany, Italy, Luxembourg, and so on...)

Now I want to secure my hierarchy for each country. So what I do is:
I create for each country a UserGroup. Then I create a UserView for each UserGroup which restricts the user access inside the diagramm (APEX, Summarize, or sth else.)

This works fine!!

The second security aspect is the following:
I want to have another 2 UserGroups:
1. not restricted (Access to all Measures)
2. restricted (Access restricted)

Now I want to add a User to a certain UserGroup for Country and also to a certain UserGroup for Measueres. What I want to have is a additive security.

But this does not work.

2 possible solutions I found until now:

1. Creating 2 Cubes and restrict on each cube the Measures.

2. Create for each combination a group (USA/restricted); (USA/not restricted) ...
Then I can use the UserView to restrict the sales channel and the measures.

But both solutions have disadvantages I dont like.

Does anybody have an idea about solving this problem??

Thanks in Advance,

Peter

Title: Re: Cube Security Issue with UserViews in C8
Post by: nonooo on 04 Dec 2008 09:14:36 AM
I had the same problem (with two dimensions)... and cognos support answer was to use your second idea.

So just like you I was not happy and made a simple program that generates this "intersection" groups in sunone, this is not really hard to do.

Sorry if this is not what you wanted to hear :(