| 摘要 |
Architecture for cell-based security on a per-user basis. A security model for this capability includes not only dimension level tables, but is extended to include cell level tables. The security model can include existing dimension tables, plus cell security tables that include a cell permissions table, a cell qualifiers table and a table that includes both the cell permissions table, a cell qualifiers. Metadata associated with the security applied to the cells for a given user can be stored locally in a local metadata store for retrieval and application against a data cube that an authenticated and authorized user is querying. In a specific implementation, the cell level security is employed in a performance management server application, where authentication is performed remotely by an authentication service, but the authorization function is performed local to the performance management server application.
|
