New blog address:

www.sqldb.co.nr

Granting Custom Access to Dimension Data

http://msdn2.microsoft.com/en-us/library/ms175366.aspx

After a Microsoft SQL Server 2005 Analysis Services (SSAS) database role has read or read/write permission to a dimension, you can define security on each dimension member (also called dimension security). By default, a database role is not allowed access to any members of any dimension. You have to grant permission to allow access to specific attributes and attribute members within the dimension. The properties that are available for viewing attributes and attribute members are: IsAllowed, AllowedSet, DeniedSet, ApplyDenied, VisualTotals, and DefaultMember. The type of access that members of a dimension role have is based on the dimension access granted, either read or read/write.

Using MDX Expressions to Set Cell Data Permissions

http://msdn2.microsoft.com/en-us/library/ms174590.aspx

The Multidimensional Expressions (MDX) expression that sets permissions to cell data can either specify which cells can be accessed or which cells cannot be accessed. By allowing access to cells for specific members in some dimensions and denying access to cells for specific members in other dimensions, cell security provides great flexibility. In fact, you can create an MDX expression that allows or denies access to any possible combination of cells.

Granting Custom Access to Cell Data

http://msdn2.microsoft.com/en-us/library/ms174590.aspx

After you grant a database role in Microsoft SQL Server 2005 Analysis Services (SSAS) read or read/write permissions to a cube, you have to grant to this database role the permission to view some or all cell data. Only granting cube access to a database role does not give that database role access to specific cube cells.