Create Password-Protected Cubes; Combining Custom Views With Dimension Views - IBM Cognos User Manual

Create Password-protected Cubes

You apply security to an entire IBM Cognos PowerCube or cube group by setting a
password to restrict access to authorized users.
When users access cubes and reports in their reporting component, they must enter
the password in the Cube Logon dialog box to see the data.
Access is controlled using database signons and, provided your users have
configured their authentication source for auto-access of protected cubes, they are
not repeatedly asked to identify themselves during the same run-time session.
When you publish a data source to IBM Cognos Connection and include the cube
password association in the data source, users are not prompted for the cube
password when they log on. For information about importing data sources in IBM
Cognos Connection, see the Administration and Security Guide.
When a password is defined at the root node of a cube group, the same password
applies to all cubes in the group. However, a password defined for a member of a
cube group overrides the password defined at the root level for the group.
Password-protected PowerCubes are recommended if you intend to build cubes for
disconnected or mobile use. Secured PowerCubes are not available for use in IBM
Cognos Business Intelligence Mobile Analysis or IBM Cognos Series 7 versions of
PowerPlay for Windows.
Procedure
1. In the property sheet for the PowerCube or cube group, click the Output tab.
2. In the Password box, enter the password and click OK.
3. In the Confirm Password dialog box, re-enter the password and click OK.

Combining Custom Views with Dimension Views

You can add custom views to a cube that already has dimension views. Use this
combination when you must control access to certain information (such as salaries)
based on a user's security classification, but do not need to restrict access to the
remaining data.
For example, suppose you create a cube group that includes separate cubes for
Central Europe, the Americas, and the Far East. For each cube, additional
protection is imposed by creating custom views that group OLAP report users
separately from security administrators for each region. When the cubes and the
accompanying authentication sources are released to users in each region, regional
security administrators can maintain security definitions for their own regions.
We do not recommend using dimension views as the basis for custom views if
auto-partitioning is in place. In very large cubes with complex partitioning
schemes, test your design to ensure that combination views do not increase cube
creation time.
Procedure
1. Create all the cube groups and dimension views you need for the model.
2. Create and apply custom views to the objects in the PowerCubes list.
Chapter 7. Adding Security
157