Hi,
We are trying out a new database security setup at a client.
For now, we are adding security on one hierarchy, cost center lv0-3. Our security cube has the Lv0 entity, and has user.
In the custom selection script, we have Select User = @User. This ensures that the system always only looks at the security set for that one user.
We activate security with both "Select entity based on Cube" and in Cube visibility: "Grant cell access where "SECURITY CUBE" <>0". We expect the result to be no cost centers and no cells visible for those people who have access to nothing, a few visible for those who have access to a few, and all visible to those who have access to all. When users have access, they should be able to see both the entity member, and the data in the cells for that member.
Instead, we get an error message displaying "The requested database is currently being modified by another user. Please try again later." on all data views. Doesn't matter if the user has access to it or not, unless the user has admin rights, they see this error message everywhere. Furthermore, all the labels are "broken", and instead of displaying the selected cost centers, they display "@Cost center". When trying to click a selector for the cost center, we get a yellow popup notifiaction saying "The requested database is currently being modified by another user. Please try again later."
We have tried replacing the security cube with another cube, that only has User and nothing else, in case the cost center entity was messing this up. Got the same results.
The issue is with the cube visibility, because when we removed that, and only kept "select entity based on cube", it worked as expected. But as soon as we tried restricting accesses to the cells, we got these issues with selectors and unexpected error messages.
Is this expected behavior in any case?
Thanks,
Krisztina