Hello,
I'm testing Row level security (dynamic values) using SQL vs. Classic Analytic Privileges....we're using SP11.
The Classic Priv approach works for both our restricted and non-restricted users (eg., those assigned _SYS_BI_CP_ALL).
The SQL Priv approach performs better but ONLY works for our restricted users. Issue is our non-restricted users (assigned _SYS_BI_CP_ALL) get 'insufficient privilege' errors when accessing the CalcView.
I'd like to implement the SQL Priv approach for the performance gains; however, I'm not able to figure out how to get it to work for our non-restricted users. Is there some special configuration needed for SQL analytic privs related to _SYS_BI_CP_ALL? Any help or suggestions would be great.
Below provides more details of our setup, in case helpful:
1) SQL Analytic Priv:
a) uses SQL Editor to embed the SQL (selects from security tables using SESSION_USER)
b) Calcviews (parent/child lvls) listed under 'Secured Models' are defined as SQL analytic priv (under CalcView's 'Apply Privilges' property's setting)
2) Restricted Role
a) assigned the SQL Analytic priv (restricted userIDs are assigned to this role)
b) _SYS_BI, _SYS_BIC, _SYS_REPO, Repository_Rest are assigned to role
3) Non-restricted ID is assigned _SYS_BI_CP_ALL
thanks!
-Christina