SAS^® 9.2 provides a new feature called Security Subsets. This feature is enabled in your OLAP cube by building the cube with the SECURITY_SUBSET=YES option in your OLAP procedure code, or by unchecking the option to include secured member values in presummarized computations within the Cube Designer found in SAS OLAP Cube Studio and SAS Data Integration Studio.

Enabling this option allows the SAS OLAP Server to exclude secured members from a parent total request. This is similar in effect to using the Visual Totals features found in SAS OLAP clients. The benefit to using the Security Subset is that the exclusion of the secured members is handled by the server directly, improving the performance of the response.

As an example, consider the following scenario:

1. A member-level permission is applied to your cube:

       {[Dealers].[All Dealers], descendants([Dealers].[All Dealers].[Smith])}

2. The following MDX query is submitted by a restricted user:

       select measures on columns,
             dealers.members on rows
       from mddbcars

3. The results returned depend on the SAS release and whether or not security subsets were enabled.
   
   
   1. If the cube was built using SAS 9.2 with the Security Subset enabled, these will be the results:
      
      
      
   2. If the cube was built using SAS 9.2 without the Security Subset enabled, the results will be the same as those seen in SAS 9.1:
      
   
   
Note that for both screen shots, the values for Smith are identical, but, in the case of 3a, the parent, "All Dealers" shows only the sales allowed by the security restriction.

Operating System and Release Information