简体   繁体   中英

How to prevent access to SSAS through visual studio?

I have a typical fact table with dimensions Project , Profit Center , etc

In a report, I have a table visual that shows individual numbers; and another table shows the department numbers…

It looks something like this:

在此处输入图像描述

(Left: personal numbers. Right: department numbers)

My goal is that Tim shouldn't be able to see someone else's number, but he definitely can (and should) see the aggregated numbers for his department.

I realized that someone accessing from PowerBI or excel can connect to the model and play with the tables, pick another name and see someone else's number, therefore I have hidden most tables...

But now, I just realized, someone with access can connect from Visual Studio to the SSAS: 在此处输入图像描述

The person can open the.bim, unhide all tables, and with the “analyze from excel” option in VS see any numbers…

Is there any way to avoid/prevent this?

More info:

My model: 在此处输入图像描述

( Project table has columns Lead1,Lead2,Lead3,Lead4,Lead5 and Lead6… Engagement Role is just an unpivot of this).

On my left visual I have:

在此处输入图像描述

(triggering a more restrictive access).

My RLS: 在此处输入图像描述

Is there any way to avoid/prevent this?

RLS will be enforced from every client experience, but RLS is never enforced for Workspace members with higher than Viewer permissions. See Using RLS with workspaces in Power BI

And hiding tables and columns is not a security measure. Hidden tables and columns can be used in DAX queries and measures.

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM