SSM KPI Security:Restricting the measures to Users

Question

Hi
I want to restrict only few KPIS(measures) to be accessed by a particular user. I was able to restrict only 22 measures(4 KPIs), beyond which i get an error.But this user should be able to access 20 KPIs(20*5 measures).  The syntax that i used:
INDEX USER
     CASE USER1
          SELECT VARIABLES KPI59_ACT,KPI59_TAR,KPI59_TRD,KPI59_TARDEV,KPI59_TRDDEV,KPI20_ACT,KPI20_TAR,KPI20_TRD,KPI20_TARDEV,KPI20_TRDDEV,KPI58_ACT,KPI58_TAR,KPI58_TRD,KPI58_TARDEV,KPI58_TRDDEV,KPI57_ACT,KPI57_TAR,KPI57_TRD,KPI57_TARDEV,KPI57_TRDDEV,KPI2_ACT,KPI2_TAR,KPI2_TRD,KPI2_TARDEV,KPI2_TRDDEV
ENDINDEX
1. Is there any way that i can restrict the access to 20 KPIs (20*5 measures)?
I also tried the following syntax but of no avail:
For example here i tried restricting access to 3 KPIs(each of which has 5 measures:Tar,Act,Trend,Gap Performance,score)
SELECT VARIABLES KPI1_* , KPI21_* , KPI33_*
2. Is there a limit on the number of characters used in the select statement because of which only few measures were included in my case?

Answer 1

Hello!
I would suggest in these cases to use the folowing syntax:
INDEX USER
CASE USER1
SELECT VAR KPI59*
SELECT VAR PLUS KPI20*
SELECT VAR PLUS KPI58*
SELECT VAR PLUS KPI57*
ENDINDEX
When you are trying to just exclude one (or even just a few) measure(s), it will be more effective to type it like this:
INDEX USER
CASE USER1
SELECT VAR *
SELECT VAR MINUS KPI20*
SELECT VAR MINUS KPI58*
ENDINDEX
After creating the SECURITY procedure, run it with
job SECURITY
command in IDQL command line. You will then be able to see right away if and where any syntax error occurs.
Hope this helps!
BR,
Ricardo Vieira