[Mondrian] Unable to secure virtual cube dimensions

[Andy Grohe]

I have been able to integrate Pentaho BIS roles with mondrian roles for base
cubes. The security does not seem to apply to virtual cubes.

is this a design choice or defect?

_______________________________________________
Mondrian mailing list
Mondrian (AT) pentaho (DOT) org
http://lists.pentaho.org/mailman/listinfo/mondrian

[Tom Barber]

Does it not work upwards and work on roles for the parent cubes?

Tom
________________________________________
From: mondrian-bounces (AT) pentaho (DOT) org [mondrian-bounces (AT) pentaho (DOT) org] On Behalf Of Andy Grohe [agrohe21 (AT) gmail (DOT) com]
Sent: 24 February 2011 17:17
To: mondrian
Subject: [Mondrian] Unable to secure virtual cube dimensions

I have been able to integrate Pentaho BIS roles with mondrian roles for base cubes. The security does not seem to apply to virtual cubes.

is this a design choice or defect?
_______________________________________________
Mondrian mailing list
Mondrian (AT) pentaho (DOT) org
http://lists.pentaho.org/mailman/listinfo/mondrian

[Julian Hyde]

> Andy Grohe wrote:
>
> I have been able to integrate Pentaho BIS roles with mondrian
> roles for base cubes. The security does not seem to apply to
> virtual cubes.
>
> is this a design choice or defect?

If I were writing the specification, it would allow you to apply access
control to virtual cube dimensions just like regular cube dimensions.

The access you have to the underlying cube dimension would not automatically
propagate to the virtual cube dimension. (This is by analogy with relational
databases: you can create a view that exposes columns of a table is
otherwise hidden.)

Suppose you deny access to some members of the Time dimension in the Sales
cube. Now you create a virtual cube Warehouse and Sales on the Sales cube,
and you include the Time dimension. Then users of the Warehouse and Sales
cube will have full access to that cube's Time dimension, unless you create
specific access control for the virtual cube dimension.

I see there is one test for access control on virtual cubes --
AccessControlTest.testVirtualCube -- so apparently the basics work. We could
definitely use some more tests, however.

If mondrian doesn't behave as the above specification, please log a jira
case.

Julian


_______________________________________________
Mondrian mailing list
Mondrian (AT) pentaho (DOT) org
http://lists.pentaho.org/mailman/listinfo/mondrian

[Andy Grohe]

As it turns out, I am able to secure virtual cubes in Pentaho 3.7.0,
"sometimes".

The security for Virtual Cubes works in PRD.
The security for Virtual Cubes does not work for jPivot or Analyzer.
jPivot and Analyzer both work for base cubes.

So I think this is not a Mondrian issue, but is a Pentaho integration
issue. I have logged a SalesForce issue and we can track it there.

FYI
3.5.2 GA security does not work at all, but there is a patch noted in JIRA.
3.7.0 incorporates that patch.

_______________________________________________
Mondrian mailing list
Mondrian (AT) pentaho (DOT) org
http://lists.pentaho.org/mailman/listinfo/mondrian