Security matter

Post Reply
zbhmida
Posts: 9
Joined: Thu Mar 28, 2013 10:12 am
OLAP Product: IBM Planning Analytics
Version: 2.0
Excel Version: 2016
Location: Paris, France

Security matter

Post by zbhmida » Tue Oct 19, 2021 2:55 pm

Hi

I'm trying to put security on cellsecurity cube,

I ll describe the case:
- i'have a security for cube A on }CubeSecutity for a cube implemented by Rules: the access right is WRITE
- i'have a }CellSecurity for element on the cube A for Two elements
- Element x ==> Write
- Element y ==> <Empty>
- when i m affected to this group i can see and put data for element x and element y but this is not what i expect, normally i should have the access only for element x
- i'have also verified on the }CubeSecurityProprities what i have on CELLSECURITYDEFAULTVALUE => NONE

So normally the default acces right is a NONE, but unfortunally i have WRITE, its seems that it s heritate from }Cubesecurity but not working, i have tried to recreate the cell security, also a have tried to restart the server but some problem,

Best regards,
Zied

burnstripe
Posts: 75
Joined: Wed May 06, 2020 2:58 pm
OLAP Product: Planning Analytics
Version: 2.0.9
Excel Version: 2016

Re: Security matter

Post by burnstripe » Tue Oct 19, 2021 6:36 pm

If the cube property CELLSECURITYDEFAULTVALUE is left empty, this also defaults users to have no access (none).

Are there multiple groups assigned to the user? If a user has read/write access through one of the other groups they will still have read/write access by default.

Do you have any tm1 applications deployed via performance modeler? The TM1 application overlay could be overriding the cellsecurity? From memory this would show up in the cube properties. Think it's the data reservation section

zbhmida
Posts: 9
Joined: Thu Mar 28, 2013 10:12 am
OLAP Product: IBM Planning Analytics
Version: 2.0
Excel Version: 2016
Location: Paris, France

Re: Security matter

Post by zbhmida » Tue Oct 19, 2021 9:10 pm

Thank for reply

I ve cheked thé user is assigned to one groups,
No perf modeler,

Isn't a bug on this PA version ?

Best regards
Zied

burnstripe
Posts: 75
Joined: Wed May 06, 2020 2:58 pm
OLAP Product: Planning Analytics
Version: 2.0.9
Excel Version: 2016

Re: Security matter

Post by burnstripe » Tue Oct 19, 2021 9:42 pm

Any user groups have admin rights set for the cube in question? Any groups with admin rights to the cube will have write access to the cell regardless of cell security

User avatar
Steve Rowe
Site Admin
Posts: 2232
Joined: Wed May 14, 2008 4:25 pm
OLAP Product: TM1
Version: 10.2.2., PAW
Excel Version: Nearly all of them

Re: Security matter

Post by Steve Rowe » Wed Oct 20, 2021 8:22 am

Or you are in the admin group itself of couse
Technical Director
www.infocat.co.uk

zbhmida
Posts: 9
Joined: Thu Mar 28, 2013 10:12 am
OLAP Product: IBM Planning Analytics
Version: 2.0
Excel Version: 2016
Location: Paris, France

Re: Security matter

Post by zbhmida » Wed Oct 20, 2021 9:05 am

Hi All,

Thanks for your reply,

Well it works after a server TM1 restart,

i forget to specifie, the Cell Security is a specific CellCubeSecurity that doesn't contain all dimensions,

Best regards,
Zied

Post Reply