Problem Dynamic Security : No filter applied without Refresh

Hi,  I am surprise because when I open my PowerPivot report on my Bi portal on Sharepoint 2013, no filter are applied, Dynamic Security not work, unless I do a refresh of my report. When I refresh my report, with an other windows account, all
the filter determined in the tabular data model, at the level of Role.
I use the User Authentification option at the level of my report PowerPivot.
Can you help to understand this bug and help me to resolve it.
Thanks for advance.

Hi,
I am not quite sure about your scenario. Are you using Power Pivot or SSAS Tabular?
Power Pivot itself does not have any security features so I guess you are talking about SSAS Tabular right?
Or are you moving data from SSAS Tabular into Power Pivot?
In this case if you you refresh the workbook a Service Account will be used and of course the securtiy settings will be derived from the credentials of this service which may be allowed to see all data
hth,
gerhard
Gerhard Brueckl
blogging @ http://blog.gbrueckl.at
working @ http://www.pmOne.com

Similar Messages

  • Dynamic Security Tabular Model : No filters are applied

    Hi,  I am surprise because when I open my PowerPivot report on my Bi portal on Sharepoint 2013, no filter are applied, Dynamic Security not work,
    unless I do a refresh of my report. When I refresh my report, with an other windows account, all the filter determined in the tabular data model, at the level of Role.
    I use the User Authentification option at the level of my report PowerPivot.
    Can you help to understand this bug and help me to resolve it.
    Thanks for advance.

    Hi,
    I am not quite sure about your scenario. Are you using Power Pivot or SSAS Tabular?
    Power Pivot itself does not have any security features so I guess you are talking about SSAS Tabular right?
    Or are you moving data from SSAS Tabular into Power Pivot?
    In this case if you you refresh the workbook a Service Account will be used and of course the securtiy settings will be derived from the credentials of this service which may be allowed to see all data
    hth,
    gerhard
    Gerhard Brueckl
    blogging @ http://blog.gbrueckl.at
    working @ http://www.pmOne.com

  • Security filter couldn't refresh to Essbase from Planning but could create

    Please kind help on look at this issue.
    I updated some dimension access in Planning,and did a security refresh in management database menu.But the access didn't refresh to Essbase filter.
    Then created filter in management security filter menu,it refreshed to Essbase successfully.
    I would grateful if someone could tell me why the first way unsuccessful.
    Thanks,

    If you go to Oracle Support and search on "planning security refresh" you will see lots of articles on this subject.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Dynamic Security username () problems

    Hi,
    I need some help with the following situation. I am trying to put into place asome sort of dynamic Security in my cube. With some help , I manage to get something working:
    select [Measures].[Sales Net Amount] on columns,
     NONEMPTY(
        [Dim Restaurants].[Restaurant].[Restaurant].members,
        ([Measures].[count],
        StrToMember("[Dim User].[User].&[2]")))
        on rows
     from [XYZ]
    my  problem is the minute I replace StrToMember("[Dim User].[User].&[2]"))) with
    StrToMember("[Dim User].[User].&["+ username() +"]"))) I get no result at all , look like this function is non existant but everey blog/post I looked they keep using this function. 
    Something is missing qand I do not see it , I am using SSAS 2012 and quite new to all of this

    The username function returns a string in the form of "domain\user" so I highly doubt that you will ever get a value of "2" coming back.
    If you run the following query you can see what this function returns in your environment 
    with member measures.UsrName as username()
    select { measures.[UsrName] } on 0 
    FROM [XYZ]
    You need to base your dynamic security on an attribute that has data in the same format that the username() function returns.
    http://darren.gosbell.com - please mark correct answers

  • Dynamic security using Security table in SSAS Tabular model

    Hi, 
    Platform : SSAS Tabular model (VS 2010)
    I need to apply Dynamic security using Security table(manually created) in Tabular model, Need to apply filter for 2 tables. I am able to
    create roles in Tabular model using USERNAME() and LOOKUP() function it worked fine. But the problem is when i am trying to give full access for a particular column and limit the access in other column, it is not working properly.
    Please find below table and guide me where i am falling short. In the Security table wherever you find ALL it means full access.
    Security table
    Login Name
    Dim_Country
    Dim_Customer
    DOMAIN\User1
    ALL
    2
    User1 should see all countries but Only 2,4 Customers
    DOMAIN\User1
    ALL
    4
    DOMAIN\User2
    2
    ALL
    User2 should see all customers but Only 2,3 countries
    DOMAIN\User2
    3
    ALL
    DOMAIN\User3
    ALL
    ALL
    User3 should see all Customers and Countries
    DOMAIN\User4
    1
    3
    User4 should see 1 Country and 3 Customer
    ALL - means NO restriction
    Numeric values indicate the Dimension IDs
    Do let me know if further explanations required.
    Thanks,
    Sundar

    Hi Sundar,
    According to your description, you want to implement dynamic security using Security table in SQL Server Analysis Services Tabular model, right?
    It is very common to have data security implementation in BI projects either at databases or Cubes and sometimes this security implementation and maintenance goes out of control due to the dynamic flow of business information. Here are some links which describe
    dynamic security implementation at SSAS tabular model using an external security table, please see:
    http://bipassion.wordpress.com/2012/10/01/ssas-tabular-dynamic-security/
    http://www.bidn.com/blogs/ChrisSchmidt/ssas/4332/dynamic-security-in-tabular
    Regards,
    Charlie Liao
    TechNet Community Support

  • Dynamic Security - Power View Cabable of ?

    Hi there,
    i am currently trying to create some Dashboard Reports using Power View for all Employees.
    But i can't allow for any Users being able to see the Data of the other.
    Is Power View capable of Determining which user is logged on and give that to my Tabular Project, so it can filter the data through the Dynamic Security implemented in the Tabular Model?

    Yes, Power View will work with the tabular model dynamic security.  Power View does not do anything special, security is applied by the model.
    http://msdn.microsoft.com/en-us/library/jj127437.aspx
    Brad Syputa, Microsoft Reporting Services This posting is provided "AS IS" with no warranties.

  • Data fetch without Refresh

    hi Friends,
    I have a problem i want to extract data from table without refresh into text field when i'll enter any value in a text field then corressponding value should come in to corressponding textfield.
    eg. when i enter emp_id 101 in a text field then the first_name and last_name ,adress should come in to corressponding text fields without refresh.
    How Can I do this.
    Thanks
    Manoj

    Hi,
    Firstly, you would find it easier not to use x.something in the tag names in your process (I'm not sure if they are allowed, but I would avoid the dots anyway!). So:
    DECLARE
    vCLASSID VARCHAR2(100);
    vSECTION VARCHAR2(100);
    vFNAME VARCHAR2(100);
    vLNAME VARCHAR2(100);
    BEGIN
    owa_util.mime_header('text/xml', FALSE );
    htp.p('Cache-Control: no-cache');
    htp.p('Pragma: no-cache');
    owa_util.http_header_close;
    SELECT C.CLASS_ID,C.SECTION,S.F_NAME INTO vCLASSID, vSECTION, vFNAME,vLNAME FROM CLASS_RECORD C INNER JOIN STUDENT_PERSONAL_DETAILS S ON
    C.STUDENT_ID = S.STUDENT_ID WHERE C.STUDENT_ID = :STUDENTID
    htp.prn('<DATA>');
    htp.prn('<CLASS_ID VALUE="' || vCLASSID || '"></CLASS_ID>');
    htp.prn('<SECTION VALUE="' || vSECTION || '"></SECTION>');
    htp.prn('<F_NAME VALUE="' || vFNAME || '"></F_NAME>');
    htp.prn('<L_NAME VALUE="' || vLNAME || '"></L_NAME>');
    EXCEPTION WHEN OTHERS THEN
    htp.prn('<DATA>');
    htp.prn('<CLASS_ID VALUE="No such CLASS NAME!"></CLASS_ID>');
    htp.prn('<SECTION VALUE="No such SECTION!"></SECTION>');
    htp.prn('<F_NAME VALUE="No such First Name!"></F_NAME>');
    htp.prn('<L_NAME VALUE="No such First Name!"></L_NAME>');
    htp.prn('</DATA>');
    END;I've also completed the EXCEPTION output as well so that both possibilities use DATA and /DATA
    This does assume that you have an Application Item called STUDENTID and that your Application Process is called SCS and is an "On Demand" process
    Now, the javascript... Firstly, you can't include dots in the var names as this identifies a property or attribute or function of an item (for example, document.location.href). Secondly, you should use the same upper/lower case text for the XML tag names as you used in the process - if you stick with uppercase throughout it is easy to remember. So, I've removed the dots and made the XML tag references uppercase:
    <script type="text/javascript">
    function getEmployeeInfo(filter)
      var xml = null;
      var get = new htmldb_Get(null, $v('pFlowId'), 'APPLICATION_PROCESS=SCS', 0);
      get.add('STUDENTID', filter.value);
      ret = get.get('XML');
      if(ret)
        var class_idItems = ret.getElementsByTagName("CLASS_ID");
        if (class_idItems)
          var class_id = document.getElementById("P314_CLASS_ID");
          class_id.value = class_idItems[0].getAttribute("VALUE");
        var sectionItems = ret.getElementsByTagName("SECTION");
        if (sectionItems)
          var section = document.getElementById("P314_SECTION");
          section.value = sectionItems[0].getAttribute("VALUE");
        var f_nameItems = ret.getElementsByTagName("F_NAME");
        if (f_nameItems)
          var f_name = document.getElementById("P314_STUDENT_NAME");
          f_name.value = f_nameItems[0].getAttribute("VALUE");
        var l_nameItems = ret.getElementsByTagName("L_NAME");
        if (l_nameItems)
          var l_name = document.getElementById("P314_STUDENT_NAME");
          l_name.value = l_nameItems[0].getAttribute("VALUE");
      get = null;
    </script>If you try those, does it now work?
    Andy

  • Dynamic Security in a denormalized Parent-Child dimension Table

    Hi guys, I need your priceless help again:
    I have a parent child relationship in a table with a fixed depth, let´s say Region-->Area-->Country
    I denormalized the table to have something like this
    Then, to implement dynamic security, I think in a bridge table with the userId
    and the CountryId, then with a measure group and a measure which count the combination of user/country I can proof the security using the non empty function.
    My question is how can I also set security for the levels above the leaf members, let´s say, I want to assign an user to the Area level or Region Level. I don't know exactly which key could I include in the bridge table.
    I may want to keep the id´s of the original table in the different levels.
    Any comment will be appreciated.
    Kind Regards,

    Hi Paul,
    According to your description, you want to apply dynamic security on parent-child hierarchy. Right?
    In Analysis Services, when a dimension contains a parent-child hierarchy, we can't set up security directly on the key attribute. Because it will not appear on the dropdown list of Dimension Data Security in Role editor.
    In this scenario, we need to filter on key attribute and not the parent-child hierarchy. Then use Linkmember() to find the equivalent members on the parent-child hierarchy. Please refer to the expression below based on a employee dimension with parent-child
    hierarchy.
    Generate(
     NonEmpty(
      [Employee].[Employee].[Employee].Members,
       [Measures].[Employee Count],
       StrToMember('[User].[User].[' + UserName() + ']')
                 LinkMember(
                     [Employee].[Employee].CurrentMember,
                     [Employee].[Employees]
    Also I suggest an excellent book:
    Expert Cube Development with Microsoft SQL Server 2008 Analysis Services. It talks about this scenario in chap 9.
    Reference:
    SSAS
    Dynamic security - Bridge table (factless) between User dimension and Parent-Child (PC) dimension
    If you have any question, please feel free to ask.
    Best Regards,
    Simon Hou
    TechNet Community Support

  • How can we update the date&time without refreshing the page

    Hi friends,
    I have a jsp page. In that there is Date and Time. The date and time should be updated for every one minute without refresh the page(dynamically).
    Its urgent for me
    Thanks
    Mallik

    hello friend ru looking at date and time @ client side frm the server side if it is all about the client side date i don't think there is use of AJAX triggers and rendering the view by modifying the dom...
    here is an example for you..
    <%@ page language="java"%>
    <HTML>
    <HEAD>
    <SCRIPT language="JavaScript">
    function startclock()
    var thetime=new Date();
    var nhours=thetime.getHours();
    var nmins=thetime.getMinutes();
    var nsecn=thetime.getSeconds();
    var nday=thetime.getDay();
    var nmonth=thetime.getMonth();
    var ntoday=thetime.getDate();
    var nyear=thetime.getYear();
    var AorP=" ";
    if (nhours>=12)
        AorP="P.M.";
    else
        AorP="A.M.";
    if (nhours>=13)
        nhours-=12;
    if (nhours==0)
       nhours=12;
    if (nsecn<10)
    nsecn="0"+nsecn;
    if (nmins<10)
    nmins="0"+nmins;
    if (nday==0)
      nday="Sunday";
    if (nday==1)
      nday="Monday";
    if (nday==2)
      nday="Tuesday";
    if (nday==3)
      nday="Wednesday";
    if (nday==4)
      nday="Thursday";
    if (nday==5)
      nday="Friday";
    if (nday==6)
      nday="Saturday";
    nmonth+=1;
    if (nyear<=99)
      nyear= "19"+nyear;
    if ((nyear>99) && (nyear<2000))
    nyear+=1900;
    this.document.getElementById("clockspot").innerHTML = "<b>"+nhours+": "+nmins+": "+nsecn+" "+AorP+" "+nday+", "+nmonth+"/"+ntoday+"/"+nyear+"</b>";
    setTimeout('startclock()',1000);
    </SCRIPT>
    </HEAD>
    <BODY>
    <div id="clockspot"></div>
    <SCRIPT language="JavaScript">
    startclock();
    </SCRIPT>
    </BODY>
    </HTML>hope this might help :)
    REGARDS,
    RaHuL

  • Problem with File RFC File scenario without using BPM

    Hi all,
      I am trying a File RFC File scenario without using BPM with the help of the following thread:
    File - RFC - File without a BPM - Possible from SP 19.
      The XI system is PI 7.0 sp 12. When I am trying to acheive the above scenario, I am getting wierd results i.e., when I observe in SXI_MONITOR, the message is showing as processed successfully, but when I watch the message status in communication channel monitoring, I am getting the following error:
    "Attempt to process file failed with com.sap.aii.af.service.cpa.CPAException: Couldn't retrieve inbound binding for the given P/S/A values: FP=;TP=;FS=DEV120;TS=Test_Service;AN=MI_Invoice;ANS=urn:sap.com:test;"
    I am not able to understand what the problem is. By the way, one more thing, is, I have kept the File processing mode as "Delete" in the sender file adapter. But the file is not getting deleted. I think the reason could be because of the above error.
    Can any body help me out in getting my problem resolved?
    Thanks,
    Adithya K

    CPA Cache Refresh from the Adapter Engine To trigger a cache refresh from the individual Adapter Framework, open a browser window and enter the following
    URL: http://<host>:<port>/CPACache/refresh?mode=<b>delta|full</b>
    The Monitoring url is like this: http://<host>:<port>/CPACache
    Thanks & Regards,
    Farooq.

  • Data fetch from table without Refresh and without using tab key.

    hi Friends,
    I have a problem i want to extract data from table without Refresh into text field without using Tab key. when i'll enter any value in a text field then corressponding value should come in to corressponding textfield without using Tab Key.
    eg. when i enter emp_id 101 in a text field then the first_name and last_name ,adress should come in to corressponding text fields without refresh and without using Tab key.
    How Can I do this.
    Thanks
    Manoj

    Hi Manoj,
    I assume that this is similar to: Data fetch without Refresh rather than Re: Value of one textfield should come into another textfield Without Using TAB ?
    If so, the only change you need to make on the first one is to use "onkeyup" instead of "onchange" in the item's "HTML Form Element Attributes" setting.
    Note, however, that the user must move away from the item at some point (for example, to click a button), so the onchange will be triggered anyway.
    Andy

  • Data fetch from two table without refresh

    hi Friends,
    I have a problem i want to extract data from two table without refresh into text field when i'll enter any value in a text field then corressponding value should come in to corressponding textfield.
    eg. there two table A and B.
    Table A has Colunm
    s_id Number;
    c_id Varchar2(30);
    sec varchar2(4);
    Second Table B Colunm Name
    s_id Number;
    f_name varchar(30);
    l_name varchar(20);
    when i enter s_id 101 in a text field then the c_id ,sec,first_name and last_name should come in to corressponding text fields without refresh.
    How Can I do this.
    Thanks
    Manoj

    Hi Manoj,
    You have to make an Ajax call to display data without refreshing the page. Search this forum for Ajax and you can find lots of related posts. This link might help too. http://www.dba-oracle.com/t_html_db_apex_ajax_application_express.htm
    Thanks,
    Manish.

  • Please help me to fix my problem in security question, I've really totally forgot the answer, this is the second time

    Please help me to fix my problem in security question I've really forgot the answer,
    Please let me know how to fix this, thank you

    You set the answers to the security questions so that nobody else can access the iPad without knowing those answers. It's a security thing. You need to get your head around the importance of these answers.  If we put all your data in a safe and gave you a password to open it, would you forget it? Twice? That is exactly what you have done.
    Restore. The fate of your data is uncertain.

  • Website pages will not open without refresh everytime

    website pages will not open without refresh everytime

    website pages will not open without refresh everytime
    That can be a symptom of a poorly performing DNS.  E.g. IE tries a lookup but doesn't wait long enough to get the answer; meanwhile the lookup proceeds, gets cached, etc.; so now when you try your "refresh" it is all there ready to go.  Unfortunately,
    I don't think there is any way of tuning your TCP to avoid this symptom.  A workaround would be trying a different DNS.  (A related workaround is to avoid a DNS relay to your router and make the OS aware of your real DNS.)  A way of changing
    the symptom is to always do enough in a cmd window to ensure a complete lookup is cached before you make your first request using IE, (e.g. using ping -n 1 because you don't care at that point if there
    is connectivity for ICMP).  But there may be problems doing that, depending on aliases and redirects and short Time To Live values.
    Post some details for a specific publicly accessible example, if you would like to see how these ideas could work with it.
    HTH
    Robert Aldwinckle

  • Information Regarding Essbase Security Except Filter Level and User Level

    I have an requirement to implement data level security in Essbase. For ex: A user can only see those data which are from Asia region or an user will be able to see those data which are from America.
    Asia and America are defined in my location dimension.
    can any one explain about it without using user Level Security and Filter level security.
    Please tell me how to do it?
    Thanks in advance.

    Sandeep's reference the DBAG and the section on filters is the right direction. The filter is created in EAS.
    Let's use an example.
    You create a METAREAD filter (that is, it filters both data and dimensionality) that gives a user limited access to the Location dimension (I think I have that right), e.g., the British Isles, the UK and Ireland. You can also create a READ filter but it only limits data and, in my opinion at least, causes confusion because users can see metadata (the whole world) but only see data for the British Isles.
    NB -- filters can be assigned to individual usernames or to groups that users are members of. For a POC, I'd keep it simple and just assign it to a username, but it's your choice.
    Assign the filter to the user in Shared Services.
    Try connecting to the database in Excel through the Classic Add-In or SmartView to test what the user sees -- it should be: Total Location, British Isles, the UK, and Ireland. You will see Total Location (top of the dimension) because that's how Essbase navigates down -- it has to have the dimension name to find the limited children. You won't see any data there. But you will see data at the Location members that the METAREAD filter allows.
    That's it -- it's been around since the year dot, and is the way access is restricted. You shouldn't need to reinvent the wheel to get this to work in OBIEE. Essbase should do the work.
    Regards,
    Cameron Lackpour

Maybe you are looking for

  • How do I use AirPort Extreme to extend my wifi network - have BT HomeHub 5

    AirPort Extreme is plugged into my HomeHub 5 and I have set it up as extending a network using the Airport Utility, but it isn't finding the network - the light is orange   Please can someone help me. Thanks Joanna

  • Layered Menu Buttons not working on DVD player

    Hello, I just made an SD DVD with several layered menus. The backgrounds for the menus come from photoshop files with different layers for normal, selected, and active states. Navigating the main menu works fine in the simulator and when I play the d

  • BPMon Custom Exit

    Hi, I have created a Custom Monitoring Object using /SSA/EXM. I have assigned 10 Parameters and 1 Key figure to this monitoring Object.  The objective of this monitor is to select the entries from a table based on the 10 parameters given in selection

  • Need help converting old Applescript for Snow Leopard

    Ok, so I've downloaded the app "PowerHour" for mac. It needs to use the date function which is different in Snow Leopard, so I've heard. I don't program in Apple Script so I can't figure out what syntax to use. Can anyone help me fix this code below?

  • Can I paste a sessionstore.js from Firefox 27.0.1 (XP) into Firefox 28 (Ubuntu 12.04 LTS?

    I saved my wife's tabs from Firefox 27.0.1 (XP) and installed Ubuntu 12.04 and Firefox 28. Now my life depends on my being able to restore her tabs. I am new to Ubuntu and I can't seem to find where sessionstore.js is located. I turned on hidden file