End User can access entire data without any cube roles

Hi Experts,

I have a report model on top of a cube. I had set a role for an end user to view some specific data which was not working, i then deleted the role from the cube. The end user can still see the entire set of data. Have anyone faced this scenario. The security doesnt seem to work at all.

Please advise.

Regards

Neeraj

Hi Neeraj,

Do you have Kerberos authentication set up? If not, and if Analysis Services is not running on the Report Server, the Report Server is likely using a fixed ID (not the end-user ID) to access Analysis Services - you could confirm the ID by tracing the login to Analysis Services in SQL Profiler.

enable security auditing ..how ?

Came across this on the checklist for best practises
Enable security auditing
. Enable security auditing of Sysadmin actions, fixed role membership
changes, all login related activity, and password changes.
. After selecting appropriate auditing options, you should
script the audit, wrap it in a stored procedure,and mark that stored
procedure for AutoStart.
But dont really know how to go about it ? Is this part of Profiler ? And if
so, will it be an overkill to run on a continuous basis on a server that may
be highly transactional ?Which checklist and which version of SQL Server?
Mike
http://www.solidqualitylearning.com
Disclaimer: This communication is an original work and represents my sole
views on the subject. It does not represent the views of any other person
or entity either by inference or direct reference.
"Hassan" <Hassan@.hotmail.com> wrote in message
news:O7RFiNKIGHA.3936@.TK2MSFTNGP12.phx.gbl...
> Came across this on the checklist for best practises
> Enable security auditing
> . Enable security auditing of Sysadmin actions, fixed role membership
> changes, all login related activity, and password changes.
> . After selecting appropriate auditing options, you should
> script the audit, wrap it in a stored procedure,and mark that stored
> procedure for AutoStart.
>
>
> But dont really know how to go about it ? Is this part of Profiler ? And
> if so, will it be an overkill to run on a continuous basis on a server
> that may be highly transactional ?
>