Cell security example

This example starts with a simple Products cube with a regional areas dimension and regional products dimension.

Some product ranges are only sold in some regions, so you want to prevent data from being entered for these regions.

The steps to prevent data from being entered for product ranges in some regions are as follows.
  1. You are logged on to Planning Analytics Workspace as an administrator. Create a user group in the Security tab of the dimension editor, and name it Americas_group.
  2. In the }ClientGroups cube, add the sales manager for the Americas territory to the Americas_group.
    Assign permissions to users
  3. In the Data tree, right-click the Regional products cube, and select Edit cell security . Both the rules editor and the cell security views are opened on the sheet. You can either set up the security by using rules, or you can set the security in the cell security view. This example uses the cell security view.
  4. In the cell security view, drag the }Groups dimension onto the context in the overview and find the Americas_group. Assign some different security to the cells for the Americas_group so that you can verify that the security is set up correctly. For example, a mixture of WRITE, READ, and NONE.
    Cell security view that shows different permissions for the Americas_group
  5. In the Data tree, go to the database and right-click Cubes > Edit settings to open the Settings editor and give WRITE access to the Regional products cube for Americas_group. Then, select Dimensions from the Settings editor menu, and give WRITE access to the Regional areas and Regional products dimension for the Americas_group.
    Settings editor, with Write access applied to Regional areas and Regional products dimensions for the Americas_group
  6. Add the Regional products cube view to the sheet and save the view as a separate object. Click the view to display the toolbar, click Save Save, then select Save as to specify a name.
  7. Enter some numbers into the view.
    View when logged on as administrator, showing all cells populated, and writable
  8. Open a different browser, and log on as the Americas sales manager who is a member of the Americas_group, and is not a member of any other group.
  9. Open the Regional products view.
    View that is logged on as Americas sales manager in a different browser
    In the example shown, you can see that the Americas sales manager can see nothing for Outdoor protection products. Other cells shaded dark gray are readable but not writable, and cells with a white or light gray background are writable.