once again i'am thankful to the kind attention given as much as i am to user4637357. To be more explicit on the reason of my question i have this cube schema .
<Schema name="Pentaho CE Audit">
my aim here is to rend this schema only accessible by the admin User, so i added
<Role name="admin">
<SchemaGrant access="all">
</SchemaGrant>
</Role>
Before the Schema closing tag. Then i reloaded the file on the system. however after those configuration the cube is not longer accessible neither by the admin or any other users. my question here is to get from you guys the right way forward to set correct criteria on the system in view of restricting access to this cube please.
Related
I'm trying to create a way to partially automate creation of roles and role permissions in SSAS multidimensional cube.
Due to some restrictions on my side this can only be done with using T-SQL to generate XMLA scripts and sending them to SSAS server.
I have XMLA scripts to create, update and delete roles.
However, I do not have a way to check if a certain user already has a role assigned in the cube.
I have found a way to get a response from SSAS server using discover, for example:
<Discover xmlns="urn:schemas-microsoft-com:xml-analysis">
<RequestType>MDSCHEMA_CUBES</RequestType>
<Restrictions />
<Properties>
<PropertyList>
<Catalog>MyCube</Catalog>
</PropertyList>
</Properties>
</Discover>
which returns a list of existing cube in the catalog.
I've found a list of existing Request types here:
https://learn.microsoft.com/en-us/previous-versions/sql/sql-server-2012/ms126079(v=sql.110)
but I see no type which returns existing roles and/or existing users in the role
Any ideas how this can be done? To get a list of existing roles or existing members in the roles by sending XMLA script to SSAS server?
DISCOVER_XML_METADATA can be used for this purpose, it returns the whole SSAS database structure so some parsing is needed to get the roles and role members specifically.
I have been desperately trying to find how to restrict Mondrain cube access on pentaho BI server 6. Knowing, my schema file is been developped manually (without using the Workbench tool). I have been desperatly been looking for answers every way.
To the best of my knowledge, you have to use the Schema Workbench tool or edit the Mondrian .xml file manually to restrict cube access to certain pre-existing work groups.
I used this resource from Pentaho to figure out how to create roles to restrict cube access: Pentaho Mondrian Access Control
I just wanna know if it's possbile to have a parameter or variable in Pentaho CE 5.0.1 when users log , so in that case each user will have his own report and cube in function of that parameter.
Thank you ,
If I understood you, you want to restrict data based on user name.
Example: User A can see Cube filtered to to Products from A department.
I used these 3 pages to implement such settings.
Try here, here and here.
The best way to do it is by assigning roles to different types of users and enabling cube security. You may grant role A the right to view a cube/schema/dimension/member and deny it to another.
As for content itself (reports, dashboards), you manage that from within Pentaho User Console by adding permissions either to a role or to a user.
We have a collection of reports on our JasperReports Server right now, most of which have input controls.
I recently implemented Roles, adding a specific role for the users of these reports (with the intention of adding additional roles in the future for other reports, not associated with this specific group).
All of the reports, some with, some without input controls are working with the exception of one that has a single input control (multi select query tied to a dropdown) that does not work for the users assigned to the role I just put in. I can access it normally as admin user.
I have checked to make sure that the role has Execute only for the Queries and for that specific query, and for the actual Input Control and the report.
If I can post something that will help troubleshoot this issue, I'm happy to do so...looking for any ideas that might help...
At this point we have not found a solution, however, I did delete the report from the server, and re-upload it from iReport, and reconnected the Input Control. After that little exercise, everything is back to working normally, and the user with the assigned role has access to everything she needs.
I am new to schema, roles and user management part in sql server. Till now I used to work with simple dbo schema but now after reading few articles I am intrested in creating schema for managing my tables in a folder fashion.
At present, I want to create a schema where i want to keep my tables that have same kind of functionality. When I tries to create a schema then I faces a problem while using query, permissions etc.
First of all i want to get used to of using schemas then only I want to explore it. But due to initial stages and work pressure as well i m not able to implement it yet.
What can i do to start using schema with default permissions as that of dbo.
Also let me know about creating roles and assigning roles on these schema. I want all this to be accessible by sa user itself at present.
What is the concept behind all these things
Basically
The schema has an owner
Objects in different schemas can access each other with no extra permissions if they have the same owner
Please see my question here: "SQL Server: How to permission schemas?" and RBarryYoung's enlightening answer...