Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

Example 7—Making Exceptions to Denied Members

In this example, the database role does not have access to cells for the Revenue measure, except for those Revenue cells that are also for Europe or one of its descendants in the Geography dimension.

The following expression is the Multidimensional Expressions (MDX) expression that sets these permissions:

Ancestor(Geography.CurrentMember, [Continent]).Name = "Europe" 
OR Measures.CurrentMember.Name <> "Revenue"

Based on these cell data permissions for this database role, a query on all cells returns the result set shown in the following table.

Continent Country/Region Cost Cost Revenue Revenue Tax Tax

1997

1998

1997

1998

1997

1998

Asia

1453

2507

#N/A

#N/A

182

266

Japan

1111

2009

#N/A

#N/A

133

210

Korea

342

498

#N/A

#N/A

49

56

Europe

1309

1514

1675

1835

304

348

France

864

931

1002

1122

205

228

Germany

445

583

673

713

99

120

N. America

2745

2544

#N/A

#N/A

456

432

Canada

622

511

#N/A

#N/A

59

58

USA

2123

2033

#N/A

#N/A

397

374

ms175343.note(en-US,SQL.90).gifImportant:
If a Microsoft Windows user or group belongs to multiple database roles, a query on all cells would first result in a dataset being generated based on each database role to which the user or group belongs. Then, Microsoft SQL Server 2005 Analysis Services (SSAS) would combine all these datasets into one dataset, and return that combined dataset to the user or group.

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft. All rights reserved.