Hello.<br><br>I have cube <span style="font-family: courier new,monospace;">[CubeA]</span> and <span style="font-family: courier new,monospace;">N</span> measures <span style="font-family: courier new,monospace;">[Measures].[M1]</span>, <span style="font-family: courier new,monospace;">[Measures].[M2]</span>, ... <span style="font-family: courier new,monospace;">[Measures].[Mn]</span>. It is easy to define a role that allow access to some members of hierarchy:<br>
<br><span style="font-family: courier new,monospace;">&lt;Role name=&quot;Allow only M1&quot;&gt;</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">    &lt;SchemaGrant access=&quot;none&quot;&gt;</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">        &lt;CubeGrant cube=&quot;CubeA&quot; access=&quot;all&quot;&gt;</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">            &lt;HierarchyGrant hierarchy=&quot;[Measures]&quot; access=&quot;custom&quot;&gt;</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">                &lt;MemberGrant member=&quot;[Measures].[M1]&quot; access=&quot;all&quot;/&gt;</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">            &lt;/HierarchyGrant&gt;</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">        &lt;/CubeGrant&gt;</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">    &lt;/SchemaGrant&gt;</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">&lt;/Role&gt;<br><font face="arial,helvetica,sans-serif"><br>because </font></span><span style="font-family: courier new,monospace;">&lt;HierarchyGrant</span>&gt;<font face="arial,helvetica,sans-serif"> by default deny</font> access to members for which access is not defined explicitly. But it is not so easy to deny access to certain members of hierarchy:<br>
<span style="font-family: courier new,monospace;"><br>&lt;Role name=&quot;Deny M1&quot;&gt;</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">    &lt;SchemaGrant access=&quot;none&quot;&gt;</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">        &lt;CubeGrant cube=&quot;CubeA&quot; access=&quot;all&quot;&gt;</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">            &lt;HierarchyGrant hierarchy=&quot;[Measures]&quot; access=&quot;custom&quot;&gt;</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">                &lt;MemberGrant member=&quot;[Measures].[M2]&quot; access=&quot;all&quot;/&gt;</span><br style="font-family: courier new,monospace;">

<span style="font-family: courier new,monospace;">                &lt;MemberGrant member=&quot;[Measures].[M3]&quot; access=&quot;all&quot;/&gt;</span><br>

<span style="font-family: courier new,monospace;">                &lt;!-- ... --&gt;</span><br style="font-family: courier new,monospace;">


<span style="font-family: courier new,monospace;">                &lt;MemberGrant member=&quot;[Measures].[Mn]&quot; access=&quot;all&quot;/&gt;</span><br style="font-family: courier new,monospace;">

<span style="font-family: courier new,monospace;"></span><span style="font-family: courier new,monospace;">            &lt;/HierarchyGrant&gt;</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">        &lt;/CubeGrant&gt;</span><br style="font-family: courier new,monospace;">

<span style="font-family: courier new,monospace;">    &lt;/SchemaGrant&gt;</span><br style="font-family: courier new,monospace;">

<span style="font-family: courier new,monospace;">&lt;/Role&gt;<br><br></span>It would be perfect to have possibility to define default access to members of hierarchy for <span style="font-family: courier new,monospace;">custom <font face="arial,helvetica,sans-serif">access of </font></span><span style="font-family: courier new,monospace;">&lt;HierarchyGrant/&gt;</span>:<br>
<br><span style="font-family: courier new,monospace;">
&lt;Role name=&quot;Deny M1&quot;&gt;</span><br style="font-family: courier new,monospace;">

<span style="font-family: courier new,monospace;">    &lt;SchemaGrant access=&quot;none&quot;&gt;</span><br style="font-family: courier new,monospace;">

<span style="font-family: courier new,monospace;">        &lt;CubeGrant cube=&quot;CubeA&quot; access=&quot;all&quot;&gt;</span><br style="font-family: courier new,monospace;">

<span style="font-family: courier new,monospace;">            &lt;HierarchyGrant hierarchy=&quot;[Measures]&quot; access=&quot;custom&quot; memberAccess=&quot;all&quot;&gt;</span><br style="font-family: courier new,monospace;">




<span style="font-family: courier new,monospace;">                &lt;MemberGrant member=&quot;[Measures].[M1]&quot; access=&quot;none&quot;/&gt;</span><br style="font-family: courier new,monospace;">



<span style="font-family: courier new,monospace;"></span><span style="font-family: courier new,monospace;">            &lt;/HierarchyGrant&gt;</span><br style="font-family: courier new,monospace;">

<span style="font-family: courier new,monospace;">        &lt;/CubeGrant&gt;</span><br style="font-family: courier new,monospace;">


<span style="font-family: courier new,monospace;">    &lt;/SchemaGrant&gt;</span><br style="font-family: courier new,monospace;">


<span style="font-family: courier new,monospace;">&lt;/Role&gt;<br><br></span><span style="font-family: courier new,monospace;">
&lt;Role name=&quot;Allow only M1&quot;&gt;</span><br style="font-family: courier new,monospace;">


<span style="font-family: courier new,monospace;">    &lt;SchemaGrant access=&quot;none&quot;&gt;</span><br style="font-family: courier new,monospace;">


<span style="font-family: courier new,monospace;">        &lt;CubeGrant cube=&quot;CubeA&quot; access=&quot;all&quot;&gt;</span><br style="font-family: courier new,monospace;">


<span style="font-family: courier new,monospace;">            &lt;!-- </span><span style="font-family: courier new,monospace;">memberAccess=&quot;none&quot; is default behavior as now </span><span style="font-family: courier new,monospace;">--&gt;</span><br style="font-family: courier new,monospace;">



<span style="font-family: courier new,monospace;">            &lt;HierarchyGrant hierarchy=&quot;[Measures]&quot; access=&quot;custom&quot; memberAccess=&quot;none&quot;&gt;</span><br style="font-family: courier new,monospace;">





<span style="font-family: courier new,monospace;">                &lt;MemberGrant member=&quot;[Measures].[M1]&quot; access=&quot;all&quot;/&gt;</span><br style="font-family: courier new,monospace;">




<span style="font-family: courier new,monospace;"></span><span style="font-family: courier new,monospace;">            &lt;/HierarchyGrant&gt;</span><br style="font-family: courier new,monospace;">


<span style="font-family: courier new,monospace;">        &lt;/CubeGrant&gt;</span><br style="font-family: courier new,monospace;">



<span style="font-family: courier new,monospace;">    &lt;/SchemaGrant&gt;</span><br style="font-family: courier new,monospace;">



<span style="font-family: courier new,monospace;">&lt;/Role&gt;<br>
</span><br>
<br>-- <br>Alexander.<br>_____________________________________________________<br>mailto:<a href="mailto:akorsukov@gmail.com">akorsukov@gmail.com</a>                icq:8572488<br>(2E0A2052)                        <a href="mailto:xmpp%3Ashko@jabber.ru">xmpp:shko@jabber.ru</a><br>
<br>