Hitachi Vantara Pentaho Community Forums
Results 1 to 7 of 7

Thread: Access Control: Mondrian-One-To-One-UserRoleMapper

  1. #1
    Join Date
    Sep 2010
    Posts
    37

    Default Access Control: Mondrian-One-To-One-UserRoleMapper

    Hi I am testing Mondrian-One-To-One-UserRoleMapper but it is not working.

    I've tested in 3.10.0 (Community Edition) and 4.5 (Community Edition).

    In the pentahoObjects.spring.xml file I put:
    <bean id="Mondrian-UserRoleMapper"
    name="Mondrian-One-To-One-UserRoleMapper"
    class="org.pentaho.platform.plugin.action.mondrian.mapper.MondrianOneToOneUserRoleListMapper"
    scope="singleton" />


    In the steelwheels.mondrian.xml file I put:
    <Role name="Authenticated">
    <SchemaGrant access="none">
    <CubeGrant cube="SteelWheelsSales" access="all">
    <HierarchyGrant hierarchy="[Markets]" access="custom" topLevel="[Markets].[Territory]">
    <MemberGrant member="[Markets].[NA].[USA].[CA]" access="all"/>
    <MemberGrant member="[Markets].[NA].[USA].[CA].[Los Angeles]" access="none"/>
    </HierarchyGrant>
    </CubeGrant>
    </SchemaGrant>
    </Role>

    But when I call the analysis I got the following message:
    This page cannot be accessed directly. It must be linked to from other pages

    Does someone has some idea why it is not working ?

    Regards.
    Kleyson Rios.

  2. #2

    Default

    I am having same problem .. Could some one help me to reolve this
    i am using 4.5 (Community Edition).

  3. #3
    Join Date
    Dec 2010
    Posts
    304

    Default

    Hi,
    which database are you using?
    What errors are reported in the log file?

  4. #4

    Default

    Quote Originally Posted by lukolap View Post
    Hi,
    which database are you using?
    What errors are reported in the log file?

    HI
    i am using default hiberante database which comes bundled whlie intalling BI server 4.5
    This is error in my log file.

    MDXConnection.ERROR_0002 - Invalid connection properties: DataSource=103BI; PoolNeeded=false; Provider=mondrian; Catalog=solution:/UID/Enrolment DM.xml; Locale=en_US
    org.pentaho.platform.api.engine.PentahoAccessControlException: MondrianOneToOneUserRoleListMapper.ERROR_001_ - Access is denied because the roles of this user don't correspond to any present in the Mondrian schema requested.

  5. #5
    Join Date
    Mar 2007
    Posts
    142

    Default

    The message is clear enough. Your user doesn't belong to any roles defined in the schema. One way to work around this is to add the default role in the BI platform, "Authenticated". Add a role to your schema file called "Authenticated" and either grant or deny all access to whatever is required. This will become the default role for Mondrian.
    Luc Boudreau
    aka. Luc le Magnifique
    aka. Monsieur Oui Oui

    Lead Engineer, Pentaho Corporation
    Web: http://devdonkey.blogspot.com
    Twitter: luclemagnifique
    IRC: Monsieur_Oui_Oui@freenode

  6. #6

    Default

    For explanation of Luc, I understand the need to create a Role called Authenticated.

    I did this, see the code below, not working, so users of the Roles Authenticated and LATAM, see everything.

    <Role name="Authenticated">
    <SchemaGrant access="none">
    <CubeGrant cube="Motor Inc Vendas" access="all">
    </CubeGrant>
    </SchemaGrant>
    </Role>

    <Role name="LATAM">
    <SchemaGrant access="all">
    <CubeGrant cube="Motor Inc Vendas" access="all">
    <HierarchyGrant hierarchy="Mercado" topLevel="Territorio" access="custom">
    <MemberGrant member="[Mercado].[LATAM]" access="all">
    </MemberGrant>
    </HierarchyGrant>
    </CubeGrant>
    </SchemaGrant>
    </Role>

    In version 3.8 there was no need to create a Role called Authenticated and everything worked perfectly.

    Any idea to solve this?

  7. #7
    Join Date
    Apr 2016
    Posts
    16

    Default schema role access

    dear all ,
    could you please help me to see this error message ? error message as following :
    MondrianOneToOneUserRoleListMapper.ERROR_001_ - Access is denied because the roles of this user don't correspond to any present in the Mondrian schema requested.

    Env:
    BISERVER 4.8
    MYSQL

    In my schema xml file , i defined a role as :
    <Role name="ceo">
    <SchemaGrant access="none">
    <CubeGrant cube="mysql" access="all">
    </CubeGrant>
    </SchemaGrant>
    </Role>

    also i define ceo role and add joe as ceo on administraion console . and then i log PUC with joe and password . but when i new analysis report , i got a error message that it cannot be opened directly , should be linked by other .

    and see the logs on server , we can see it caused by joe access denied as said above . but i have assign ceo to joe and also i active mondrian role mapping.

    i will be really appreciate if anyone give me any advice ! thanks.

    yours lily.

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Privacy Policy | Legal Notices | Safe Harbor Privacy Policy

Copyright © 2005 - 2019 Hitachi Vantara Corporation. All Rights Reserved.