SQL Server Analysis Services角色问题 [英] SQL Server Analysis Services roles issue
问题描述
我有这个问题：
我有一个用户分配了2个不同的角色： Read_PMs 。这个角色是查看用户拥有的项目
。
-Dimension data section
              -cube code（filter）
                全部
                    * AA
                    * BB
                    * CC
                    * ...
                    * II
AA，BB，...是立方体代码。 所有立方体代码都标有复选框。这意味着如果用户在任何这些立方体代码中，用户可以看到他们自己的项目
。
* Read_PM_II：
此角色具有以下限制：
-Dimension data部分
-cube code（filter）
All
AA
BB
CC
...
* II
只有多维数据集代码II的复选框被标记为
假设处于Read_PM角色的用户只能看到与多维数据集代码AA相关的信息。
还假设用户在Read_PM_II中。
预计最终只能看到立方体AA和II中的代码数据。
但它不是那样的。
用户是从AA，BB，CC，II查看数据。
出现问题的原因是：
Read_PM有所有选定的多维数据集代码，以便用户可以在任何这些多维数据集代码中查看自己的项目。
用户处于另一个角色（Read_PM_II），组合了限制并在所有多维数据集中看到信息代码
有谁知道如何纠正这个问题？
嗨MarSteven，
你会获取所有代码，因为你有两个角色（一个可以查看AA，BB，CC另一个可以查看II）并且他们的条件将结合。所以我认为你可以为相应的用户创建一个新角色，然后你可以直接指定数据用户可以访问。
或者您可以参考 SSAS角色安全的附加设计 了解详情。
此外，您需要检查该用户是否是服务器的管理员。无法拒绝Analysis Services服务器角色访问任何数据库中的任何对象，并且无法拒绝对数据库中具有完全控制（管理员）
权限的Analysis Services数据库角色成员访问该数据库中的任何对象。你可以参考 授权
访问对象和操作 了解详情。
最好的问候，
Zoe Zhi
I have this issue:
I have one user assigned in 2 different roles: Read_PMs. This role is to see projects that the user owns.
-Dimension data section
-cube code (filter)
All
* AA
* BB
* CC
* ...
* II
AA, BB, ... are cube codes. All the cube codes are marked in the checkbox. This means that the user can see their own projects if they are in any of those cube code.
*Read_PM_II:
This role has the following restriction:
-Dimension data section
-cube code (filter)
All
AA
BB
CC
...
* II
Only the checkbox for the cube code II is marked
Suppose that a user that is in the Read_PM role can only see information related to the cube code AA.Also suppose that user is in Read_PM_II.
It would be expected that in the end only visualize cube code data in AA and in II.
But it is not like that.
The user is viewing data from AA, BB, CC, II.
The problem occurs because:
Read_PM has all the selected cube codes so that the user can see their own projects in any of these cube codes.
The user is in another role (Read_PM_II) the restriction is combined and information is seen in all the cube codes
Does anyone know how to correct this problem?
Hi MarSteven,
You will get all code, because you are in two role(one could view AA,BB,CC another could view II) and their condition will combine. So I think you could create a new role for corresponding user, then could you directly specify data which user could access. Or you could refer to The Additive Design of SSAS Role Security for details.
In addition, you need to check whether that user is an administrator of server. Members of the Analysis Services server role cannot be denied access to any object in any database, and members of an Analysis Services database role that has Full Control (Administrator) permissions within a database cannot be denied access to any object within that database. You could refer to Authorizing access to objects and operations for details.
Best Regards,
Zoe Zhi
这篇关于SQL Server Analysis Services角色问题的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
