I've set up a schema with some roles to grant/deny access. I used the Mondrian-UserRolesMapper to map LDAP roles to my Mondrian roles, but all cubes are still visible to all users in Saiku. I've found a few threads that suggest modifications saiku datasources and the user.properties file in the standalone application, but I can't find anything analogous in the BI Server Plugin, which I am using. I have BI Server 3.7 and Saiku 2.2. How can I use Mondrian roles on Saiku cubes?

asked 10 Feb, 18:45

capnmojo's gravatar image

capnmojo
1112
accept rate: 0%

edited 10 Feb, 19:05


if you're using the mondrian role mapper then saiku should pick it up the same way as jpivot / analyzer you dont have to configure anything saiku specific to make it work

do your permissions work as you want in jpivot?

link

answered 12 Feb, 10:50

pstoellberger's gravatar image

pstoellberger ♦♦
89727
accept rate: 5%

If the schema is accessed in an Analysis View by a non-privileged user, all they get is "This page cannot be accessed directly. It must be linked to from other pages". I'm not sure if that's the intended behavior, but after struggling with this for a while, I decided to call it a victory. So yes, it appears JPivot is properly affected by the Mondrian roll mapper.

link

answered 13 Feb, 11:24

capnmojo's gravatar image

capnmojo
1112
accept rate: 0%

i dont know how you do it in jpivot and what effect it has exactly.

i just know that if you define the mondrian role mapper, saiku should use it. i also left in a debugging output. so whenever a role is applied it will tell you in catalina.out

Something like:

"Setting role to datasource: SteelWheelsSales role: California Manager"

just open up the catalina log file right after you opened saiku.

-Paul

link

answered 14 Feb, 05:11

pstoellberger's gravatar image

pstoellberger ♦♦
89727
accept rate: 5%

I see a handful of "servicing request for resource /saiku..." lines, and it loads saiku.properties, but I see nothing about roles. Do I need to change something in my log4j.xml?

This is everything that showed up in catalina.out after opening Saiku: http://pastebin.com/e0nhdKYz

link

answered 14 Feb, 13:58

capnmojo's gravatar image

capnmojo
1112
accept rate: 0%

no you shouldn't need to change anything hm interesting

i'll try and test that again could you file a bug for that so i won't forget in https://github.com/OSBI/saiku/issues ? thanks!

-paul

link

answered 14 Feb, 14:03

pstoellberger's gravatar image

pstoellberger ♦♦
89727
accept rate: 5%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×16
×3
×2

Asked: 10 Feb, 18:45

Seen: 310 times

Last updated: 14 Feb, 14:03

powered by OSQA