Mask Member Values by Role?
I'm running SQL Server 2005 and have a need to permit a role to have access to a dimension attribute, but not be able to see the member values (we have drillthrough and report actions that include the attribute and some users need to see the member value, while others should not). Similar to masking a credit card number. In SQL I would do this via a case statement in a view or appending to a where clause in the appropriate semantic layer based on the group/role, but can't figure out a good solution for SSAS.
Has anyone been able to mask the member name data based on Role security settings? I've tried a combination of dimension data and cell level settings but thus far either end up being able to see the member values or get errors attempting the drillthrough action. I can always create two sets of actions/reports but would prefer to control this via role permissions.
Have You Taken a Look at Linked Reports?
If I understand the need, linked reports in Reporting Services might fit the requirement, without risking the processing degradation and other possible issues that might arise if you try to do this in the AS layer.
Take a look at linked reports, and get back if you have further questions. Here's an intro article I wrote (still essentially the same in 2k5 and beyond) that touches on at least some of what you might like to consider.
http://www.databasejournal.com/featu...rt-Manager.htm
Thanks.
Bill