1. TARGIT Community
  2. Community
  3. Administrator

Disabling include empty members for sensitive data

Avatar
Christian Foyer

Hi,

Our BI solution serves many departments and organizations from a shared cube. For the vast majority of use cases, forced criteria based on the department or organization has worked well. With the relationships we have setup and the use of Targit Management, we can ensure that the reports only show data relevant to the user's department or organization.

However, with access to the Designer client, our users are able to look at all of the members of a dimension by adding it to the criteria bar and enabling include empty members. Here is what we have tried so far:

1. Creating a relationship directly in SSAS from the department to the sensitive dimension: Created an ambiguous path between entities and therefore failed to deploy.

2. Adding a forced criteria to the dimension directly: All data that did not have a relationship to the dimension was no longer shown.

3. Enforcing non empty criteria in data decorations: Made the include empty members not active by default, but could be enabled again through the designer client.

4. Enforcing search only in data decorations: Obscures it slightly more, but all values can be shown using the wildcard * and enabling empty members in designer mode. This also makes the report slightly harder to use, since it requires an understanding of the search bar.

So is there a way to mark a dimension or attribute therein as being not able to have include empty members enabled?

0

Comments

2 comments
Sort by Date Votes
  • Avatar
    Ole Dyring

    Hi Christian,

    I am a little puzzled that the forced criteria solution does not work for you.

    This is the expected behavior:

    • You have a dimension: Dim1
    • Go to a role, RoleZ, in TARGIT Management to set a forced criteria: Dim1 = MemberA
    • When opening a TARGIT client, users, even Designer users, that are members of RoleZ will now be limited to see data only for Dim1 = MemberA
    • Furthermore, Designer users will not be able to see the other members of Dim1. 'Including empty members' will not reveal other members of Dim1.

    If this is still an issue for you, I suggest you get in touch with the official TARGIT Support. They will be able to investigate further. You can open a support request here: https://portal.targit.com/

    BR / Ole

    0
  • Avatar
    Christian Foyer

    The issue here is that the dimension relating to the organization is related to all of the facts, and the sensitive dimension is only related to some facts. If I create another forced criteria that filters the sensitive dimension, it excludes all of the data from the facts that are not related to the sensitive dimension.

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post