Project Server 2007 OLAP Security

[anovak]

Right now I’ve got security in general setup to where you can see
projects/resources that are your descendants in Project Pro and PWA
and I expected the OLAP viewing worked the same way.

I have a particular OLAP cube setup to where the following categories
apply:

My Projects
My Resources
My Tasks

However, I had a user go into Data Analysis just now and all resources
are listed, not just those people who work for them. How can I set
this up to where the same security that drives Project Pro and PWA
drives OLAP?

I hope this makes sense.

Thanks,
Andy

 

[Gary L. Chefetz [MVP]]

Andy:

You can't do this as the OLAP data is not governed by Project Server
security other than the right to access it. Essentially, once you give
someone access to a cube, they can see all data in the cube.

--

Gary L. Chefetz, MVP
MSProjectExperts
For Project Server Consulting: http://www.msprojectexperts.com
For Project Server FAQS: http://www.projectserverexperts.com


Right now I’ve got security in general setup to where you can see
projects/resources that are your descendants in Project Pro and PWA
and I expected the OLAP viewing worked the same way.

I have a particular OLAP cube setup to where the following categories
apply:

My Projects
My Resources
My Tasks

However, I had a user go into Data Analysis just now and all resources
are listed, not just those people who work for them. How can I set
this up to where the same security that drives Project Pro and PWA
drives OLAP?

I hope this makes sense.

Thanks,
Andy

 

[anovak]

Andy:

You can't do this as the OLAP data is not governed by Project Server
security other than the right to access it. Essentially, once you give
someone access to a cube, they can see all data in the cube.

--

Gary L. Chefetz, MVP
MSProjectExperts
For Project Server Consulting:http://www.msprojectexperts.com
For Project Server FAQS:http://www.projectserverexperts.com


Right now I’ve got security in general setup to where you can see
projects/resources that are your descendants in Project Pro and PWA
and I expected the OLAP viewing worked the same way.

I have a particular OLAP cube setup to where the following categories
apply:

My Projects
My Resources
My Tasks

However, I had a user go into Data Analysis just now and all resources
are listed, not just those people who work for them.   How can I set
this up to where the same security that drives Project Pro and PWA
drives OLAP?

I hope this makes sense.

Thanks,

Gary, isn't that an issue with other folks as well? I mean, if an
installation were enterprise-wide, wouldn't different departments want
to keep their data out of other depts hands?

I noticed that you can setup up a filter when a View is created. Is
there a setting to where the filter is "locked" and then you limit
access to that view to certain people?

Thanks,
Andy

 

[Gary L. Chefetz [MVP]]

Andy:

Data isolation is best accomplished by using multiple instances. You can try
to manage this by creating views for specific security categories and making
sure that you disable the show toolbar and show fields list option, but I
don't think it is a perfect solution.

--

Gary L. Chefetz, MVP
MSProjectExperts
For Project Server Consulting: http://www.msprojectexperts.com
For Project Server FAQS: http://www.projectserverexperts.com

Andy:

You can't do this as the OLAP data is not governed by Project Server
security other than the right to access it. Essentially, once you give
someone access to a cube, they can see all data in the cube.

--

Gary L. Chefetz, MVP
MSProjectExperts
For Project Server Consulting:http://www.msprojectexperts.com
For Project Server FAQS:http://www.projectserverexperts.com


Right now I’ve got security in general setup to where you can see
projects/resources that are your descendants in Project Pro and PWA
and I expected the OLAP viewing worked the same way.

I have a particular OLAP cube setup to where the following categories
apply:

My Projects
My Resources
My Tasks

However, I had a user go into Data Analysis just now and all resources
are listed, not just those people who work for them. How can I set
this up to where the same security that drives Project Pro and PWA
drives OLAP?

I hope this makes sense.

Thanks,

Gary, isn't that an issue with other folks as well? I mean, if an
installation were enterprise-wide, wouldn't different departments want
to keep their data out of other depts hands?

I noticed that you can setup up a filter when a View is created. Is
there a setting to where the filter is "locked" and then you limit
access to that view to certain people?

Thanks,
Andy

 

[anovak]

Andy:

Data isolation is best accomplished by using multiple instances. You can try
to manage this by creating views for specific security categories and making
sure that you disable the show toolbar and show fields list option, but I
don't think it is a perfect solution.

--

Gary L. Chefetz, MVP
MSProjectExperts
For Project Server Consulting:http://www.msprojectexperts.com
For Project Server FAQS:http://www.projectserverexperts.com












Gary, isn't that an issue with other folks as well?  I mean, if an
installation were enterprise-wide, wouldn't different departments want
to keep their data out of other depts hands?

I noticed that you can setup up a filter when a View is created.  Is
there a setting to where the filter is "locked" and then you limit
access to that view to certain people?

Thanks,
Andy

Gary, Even if the tool bar and fields list were disabled, could they
still filter for other group's data other than themselves?