Share via

  • Article

Example 3—Denying Access to a Single Member

In this example, the database role does not have access to cells for the Tax measure, but does have access to cells for all other measures. The following expression is the Multidimensional Expressions (MDX) expression that sets these permissions:

Not Measures.CurrentMember IS Measures.Tax

Reviewing the Result Set

Based on these cell data permissions for this database role, a query on all cells returns the result set shown in the following table.

Continent

Region

Cost

Cost

Revenue

Revenue

Tax

Tax

1997

1998

1997

1998

1997

1998

Asia

.

1453

2507

1892

2918

#N/A

#N/A

.

Japan

1111

2009

1349

2306

#N/A

#N/A

.

Korea

342

498

543

612

#N/A

#N/A

Europe

.

1309

1514

1675

1835

#N/A

#N/A

.

France

864

931

1002

1122

#N/A

#N/A

.

Germany

445

583

673

713

#N/A

#N/A

N. America

.

2745

2544

3351

3201

#N/A

#N/A

.

Canada

622

511

740

691

#N/A

#N/A

.

USA

2123

2033

2611

2510

#N/A

#N/A

Important

If a Microsoft Windows user or group belongs to multiple database roles, a query on all cells would first result in a dataset being generated based on each database role to which the user or group belongs. Then, MicrosoftSQL ServerAnalysis Services would combine all these datasets into one dataset, and return that combined dataset to the user or group.