Uploaded image for project: 'Pentaho Analysis - Mondrian'
  1. Pentaho Analysis - Mondrian
  2. MONDRIAN-1121

Member grant not working as expected when parent/child relationship is defined in the hierarchy level



    • Type: Bug
    • Status: Open
    • Severity: Urgent
    • Resolution: Unresolved
    • Affects Version/s: 3.4.1 GA (4.5.0 GA Suite Release)
    • Fix Version/s: Backlog
    • Labels:
    • Notice:
      When an issue is open, the "Fix Version/s" field conveys a target, not necessarily a commitment. When an issue is closed, the "Fix Version/s" field conveys the version that the issue was fixed in.


      Client has defined membership grants to restrict the data an employee can see.
      However, the user can still see his supervisor and all his subordinates.
      Basically, the whole tree of manager and subordinates.
      The behaviour is illustrated with the attached sample.
      The sample is based on some MySQL test data.

      • Restore the data tables from the zipped file.
      • Enable role mapping.
      • Define a connection to the MySQL for the BI server from PEC.
      • Open the schema, define a connection to the MySQL database.
      • Publish the schema to the server.
      • The schema has been defined with a role grant for 'Admin' which is the user 'joe'.
      • 'joe' has been granted access to see employee id '3'.
      • This employee is reporting to employee id '1' and has several subordinates.
      • Log onto the PUC as 'joe'.
      • Build a new Analyzer report against the published schema.
      • Drag the Employee ID to the reporting canvas.
      • All the employee ID belonging to the child/parent tree with employee '3' is listed and not just emplyee '3'.

      Only employee '3' show show on the report as the membergrant specifed employee id '3'.


          Issue Links



              Unassigned Unassigned
              myau Man Shing Yau (Inactive)
              1 Vote for this issue
              3 Start watching this issue