Default permissions

Default permissions (None, Read, or Write) can be defined by the administrator generically, in all Multidimensional Access Control (MDAC) cubes, and in specific MDAC cubes.

The generic default applies to the Cube Permission cube (#_TABACC) and to the Dimension Access Control cubes.

If a default is set in a specific MDAC cube, then it overrides the configured default in all MDAC cubes for the specified cube.

You cannot set different default settings for different dimensions. Default permissions are defined using EPM Administration or with the Cube PutProperties XML function.

This example sets the default permission in the MDAC cube #Analysis to None:

<Alea:Document xmlns:Alea="http://www.misag.com">
  <Alea:Request RequestID="1.1" Class="Cube" Method="PutProperties">
    <Alea:Cube Name="#Analysis">
      <Alea:Properties>
        <Alea:DefaultPermission>None</Alea:DefaultPermission>
      </Alea:Properties>
    </Alea:Cube>
  </Alea:Request>
</Alea:Document>

Caution:

If you change the configuration, then the permission default is interpreted differently. For example, if the default permission is changed from None to Read, users can see elements without explicit permissions set that were previously hidden to them.

After the default permission is changed, you must verify that the permissions are set correctly with the new configuration.