Showing posts with label role. Show all posts
Showing posts with label role. Show all posts

Saturday, February 11, 2012

#N/A in measures - Excel 2003 client

After giving some users read access to the cube, by using a readonly role -
The [Measures] are displayed with #N/A in Excel 2003. Only users with loal administrator previledge can see measures.

Please advise.

What I encountered with AS 2005 was that Cell Security defaulted to denying access to a reader role, resulting in #N/A. So I simply entered "1" as the MDX expression for "allow reading of cube content" - not sure if this is the issue for you as well:

http://msdn2.microsoft.com/en-us/library/ms174847(SQL.90).aspx

>>

Granting Custom Access to Cell Data

After you grant a database role in Microsoft SQL Server 2005 Analysis Services (SSAS) read or read/write permissions to a cube, you have to grant to this database role the permission to view some or all cell data. Only granting cube access to a database role does not give that database role access to specific cube cells.

...

>>

|||Can you please give more details about when AS2005 by default disables cell security ? Creating cell security, even as trivial as constant 1 may have very bad effect on performance, since there are many important optimizations which are disabled in the presence of cell security...|||

Hi Mosha,

From what I can tell (based on a simple prototype AS 2005 RTM cube), cell read is disabled by default, unless "Full control (Administrator)" is selected on this page:

http://msdn2.microsoft.com/en-us/library/ms188508(SQL.90).aspx

>>

General (Role Designer) (SSAS)

>>

And that is regardless of "Enable read permissions" being checked on this page (unless "1" is entered for the "Allow reading of cube content" MDX expression):

http://msdn2.microsoft.com/en-us/library/ms177279(SQL.90).aspx

>>

Cell Data (Role Designer) (SSAS)

>>

Is there perhaps a better way to configure cell read access for a non-admin role?

|||

Dear ASMK,

Please check your cell security MDX, the measure you are viewing might be in the

denied member list. This might be helpfull.

#N/A in measures - Excel 2003 client

After giving some users read access to the cube, by using a readonly role -
The [Measures] are displayed with #N/A in Excel 2003. Only users with loal administrator previledge can see measures.

Please advise.

What I encountered with AS 2005 was that Cell Security defaulted to denying access to a reader role, resulting in #N/A. So I simply entered "1" as the MDX expression for "allow reading of cube content" - not sure if this is the issue for you as well:

http://msdn2.microsoft.com/en-us/library/ms174847(SQL.90).aspx

>>

Granting Custom Access to Cell Data

After you grant a database role in Microsoft SQL Server 2005 Analysis Services (SSAS) read or read/write permissions to a cube, you have to grant to this database role the permission to view some or all cell data. Only granting cube access to a database role does not give that database role access to specific cube cells.

...

>>

|||Can you please give more details about when AS2005 by default disables cell security ? Creating cell security, even as trivial as constant 1 may have very bad effect on performance, since there are many important optimizations which are disabled in the presence of cell security...|||

Hi Mosha,

From what I can tell (based on a simple prototype AS 2005 RTM cube), cell read is disabled by default, unless "Full control (Administrator)" is selected on this page:

http://msdn2.microsoft.com/en-us/library/ms188508(SQL.90).aspx

>>

General (Role Designer) (SSAS)

>>

And that is regardless of "Enable read permissions" being checked on this page (unless "1" is entered for the "Allow reading of cube content" MDX expression):

http://msdn2.microsoft.com/en-us/library/ms177279(SQL.90).aspx

>>

Cell Data (Role Designer) (SSAS)

>>

Is there perhaps a better way to configure cell read access for a non-admin role?

|||

Dear ASMK,

Please check your cell security MDX, the measure you are viewing might be in the

denied member list. This might be helpfull.

Thursday, February 9, 2012

#### Security on Report Manager ####

Hi:
I have security settings for everyone as browser on my home directory of the
report manager. No matter what settings I have for the browser role, (view
reports lets him view report properties as well). But i dont want my users to
go in and chnage the data source properties or parameters. How can i not show
the properties tab for the reports, but still have the susbcription available.
ThanksIf the account your testing with sees other report properties than jsut the
General properties (which would not let them get at the
data source) then it is not coming in as "Everyone". May be the account
you are testing with is a member of a higher privelege group.
"Everyone" should have the ability to access subscriptions so long as report
is being executed using stored credentials.
--
-- "This posting is provided 'AS IS' with no warranties, and confers no
rights."
jhmiller@.online.microsoft.com
"NI" <NI@.discussions.microsoft.com> wrote in message
news:5D49B753-7185-49B1-92C5-249A0A6E0788@.microsoft.com...
> Hi:
> I have security settings for everyone as browser on my home directory of
> the
> report manager. No matter what settings I have for the browser role,
> (view
> reports lets him view report properties as well). But i dont want my users
> to
> go in and chnage the data source properties or parameters. How can i not
> show
> the properties tab for the reports, but still have the susbcription
> available.
> Thanks|||Thats exactly what I want, browser be able to see just general properties and
subscription, and not get to parameters and data sources. And you may be
right when you say, the acocunt I am testing with is not coming in as
Everyone. Before I had "everyone" set up on the home directory, I used to
have a bunch of accounts (individual user in the format domain\user) set up.
Now I removed all those individual settings and have just everyone. But when
I look at the ReportServer DB and Users table, it has everyone with userType
1 and Auth Type 1. And it has those individual user accounts I used to have
with userType 1and Auth Type 1, and it has some other indivual accounts
(whihc I never set up, but they r probably hitting the reports coz everyone
can see them), with userTpe 0 and authType 1. Also one wierd thing, it has
"domain\" with UserType 1 and AuthType 1.
Anything wrong happening here.
Thanks a bunch
"John H. Miller" wrote:
> If the account your testing with sees other report properties than jsut the
> General properties (which would not let them get at the
> data source) then it is not coming in as "Everyone". May be the account
> you are testing with is a member of a higher privelege group.
> "Everyone" should have the ability to access subscriptions so long as report
> is being executed using stored credentials.
> --
> -- "This posting is provided 'AS IS' with no warranties, and confers no
> rights."
> jhmiller@.online.microsoft.com
> "NI" <NI@.discussions.microsoft.com> wrote in message
> news:5D49B753-7185-49B1-92C5-249A0A6E0788@.microsoft.com...
> > Hi:
> >
> > I have security settings for everyone as browser on my home directory of
> > the
> > report manager. No matter what settings I have for the browser role,
> > (view
> > reports lets him view report properties as well). But i dont want my users
> > to
> > go in and chnage the data source properties or parameters. How can i not
> > show
> > the properties tab for the reports, but still have the susbcription
> > available.
> >
> > Thanks
>
>