Security breach with the CUBE?!?

[John Horton]

I work in an environment with multiple sub contractors who I would like to
give cube views to. The problem is that I do not see how I can prevent them
from opening the file list and accessing the data from other subs. If the
solution is that I have to lock all business partners out of the Reporting
views, that is not the end of the world but does not make me very happy.

We almost did not notice this issue and could have had a huge breach of
confidentiality.
We are not deploying any custom programmed bits. Is there a solution within
the standard security model?

 

[Ben Howard]

The only way around this is to modify the security roles in the cube, so you
lock out users from certain data. You could do this for certain measures,
and I'm guessing dimensions, but probably not elements of dimensions. I
guess a question for the OLAP usergroup.

 

[Paul Conroy]

How about generating SRS Reports which only contain the information for each
subbie (you can still use the cube as your data source, but can filter the
data within the report query). That way you don't need to worry about cube
security and access can still be achieved over the web.

 

[John Horton]

We do not have a programer on staff. So I do not know if SRS is an option. We
did tweak Security to pull access from the subs.