[Mondrian] Suggestion: <HierarchyGrant access="custom"> add defaultmember access

[Julian Hyde]

Usually the access to a member is inherited from its parent. For instance,
if you deny access to [USA].[CA], then all of its children are by default
denied. Then you can explicitly grant access to [USA].[CA].[San Francisco],
and the children of San Francisco are by default granted.
 
You know all that. The problem in this case is that there is single root
member - there are a lot of members of the first level.
 
I agree with your solution. Please log a feature request.
 
Julian


  _____  

From: mondrian-bounces at pentaho.org [mailto:mondrian-bounces at pentaho.org] On
Behalf Of Alexander Korsukov
Sent: Sunday, June 21, 2009 8:34 PM
To: Mondrian developer mailing list
Subject: [Mondrian] Suggestion: <HierarchyGrant access="custom"> add
defaultmember access


Hello.

I have cube [CubeA] and N measures [Measures].[M1], [Measures].[M2], ...
[Measures].[Mn]. It is easy to define a role that allow access to some
members of hierarchy:

<Role name="Allow only M1">
    <SchemaGrant access="none">
        <CubeGrant cube="CubeA" access="all">
            <HierarchyGrant hierarchy="[Measures]" access="custom">
                <MemberGrant member="[Measures].[M1]" access="all"/>
            </HierarchyGrant>
        </CubeGrant>
    </SchemaGrant>
</Role>

because <HierarchyGrant> by default deny access to members for which access
is not defined explicitly. But it is not so easy to deny access to certain
members of hierarchy:

<Role name="Deny M1">
    <SchemaGrant access="none">
        <CubeGrant cube="CubeA" access="all">
            <HierarchyGrant hierarchy="[Measures]" access="custom">
                <MemberGrant member="[Measures].[M2]" access="all"/>
                <MemberGrant member="[Measures].[M3]" access="all"/>
                <!-- ... -->
                <MemberGrant member="[Measures].[Mn]" access="all"/>
            </HierarchyGrant>
        </CubeGrant>
    </SchemaGrant>
</Role>

It would be perfect to have possibility to define default access to members
of hierarchy for custom access of <HierarchyGrant/>:

<Role name="Deny M1">
    <SchemaGrant access="none">
        <CubeGrant cube="CubeA" access="all">
            <HierarchyGrant hierarchy="[Measures]" access="custom"
memberAccess="all">
                <MemberGrant member="[Measures].[M1]" access="none"/>
            </HierarchyGrant>
        </CubeGrant>
    </SchemaGrant>
</Role>

<Role name="Allow only M1">
    <SchemaGrant access="none">
        <CubeGrant cube="CubeA" access="all">
            <!-- memberAccess="none" is default behavior as now -->
            <HierarchyGrant hierarchy="[Measures]" access="custom"
memberAccess="none">
                <MemberGrant member="[Measures].[M1]" access="all"/>
            </HierarchyGrant>
        </CubeGrant>
    </SchemaGrant>
</Role>


-- 
Alexander.
_____________________________________________________
mailto:akorsukov at gmail.com                icq:8572488
(2E0A2052)                        xmpp:shko at jabber.ru
<mailto:xmpp%3Ashko at jabber.ru> 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.pentaho.org/pipermail/mondrian/attachments/20090622/8fee9ce9/attachment.html