Hitachi Vantara Pentaho Community Forums
Results 1 to 2 of 2

Thread: Hierarchygrant with not existent member exposes all data?

  1. #1
    Join Date
    Aug 2013
    Posts
    25

    Default Hierarchygrant with not existent member exposes all data?

    I hope I make some error. But if I grant some role to a non existent member the user gets access to all data.
    dimension definition:
    Code:
    <Dimension type="StandardDimension" visible="true" highCardinality="false" name="Hub hierarchy">
        <Hierarchy name="Hub hierarchy" visible="true" hasAll="true" allMemberName="All" allMemberCaption="All" primaryKey="hub_key">
            <Table name="hub">
            </Table>
            <Level name="Service provider" visible="true" column="sp_key" nameColumn="service_provider" ordinalColumn="service_provider" type="String" uniqueMembers="false" levelType="Regular" hideMemberIf="Never">
            </Level>
            <Level name="Project" visible="true" column="project_key" nameColumn="project" ordinalColumn="project" type="String" uniqueMembers="false" levelType="Regular" hideMemberIf="Never">
            </Level>
            <Level name="Community" visible="true" column="community_key" nameColumn="community" ordinalColumn="community" type="String" uniqueMembers="false" levelType="Regular" hideMemberIf="Never">
            </Level>
            <Level name="Hub" visible="true" column="hub_key" nameColumn="hub" ordinalColumn="hub" type="String" uniqueMembers="false" levelType="Regular" hideMemberIf="Never">
                <Property name="Currency" column="currency" type="String">
                </Property>
            </Level>
        </Hierarchy>
    </Dimension>
    Role
    Code:
    <Role name="C_SHEEPCARE">
        <SchemaGrant access="all">
            <CubeGrant cube="CubeName" access="all">
                <HierarchyGrant hierarchy="[Hub hierarchy.Hub hierarchy]" rollupPolicy="partial" access="custom">
                    <MemberGrant member="[Hub hierarchy.Hub hierarchy].[Community].[SHEEPCARE]" access="all">
                    </MemberGrant>
                </HierarchyGrant>
            </CubeGrant>
        </SchemaGrant>
    </Role>
    Community has no member 'SHEEPCARE'. But if this role is in effect, the user has access to all data... (pentaho 5.4 with saiku/Pash) Should i change something or did I found a bug...

  2. #2
    Join Date
    Aug 2013
    Posts
    25

    Default

    Quote Originally Posted by Seb17 View Post
    I would write [Hub hierarchy].[Hub hierarchy] instead of [Hub hierarchy.Hub hierarchy]
    Does this solve this issue, or just a remark how to improve the query?

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Privacy Policy | Legal Notices | Safe Harbor Privacy Policy

Copyright © 2005 - 2019 Hitachi Vantara Corporation. All Rights Reserved.