User Access Control + Dimensional Model

View previous topic View next topic Go down

User Access Control + Dimensional Model

Post  LR on Thu Sep 16, 2010 8:54 am

Hi All,

How can I implement an user access control along with a dimensional model?
Let me take the classic sales star schema: fact_sales, dim_date, dim_store and dim_product.
Also I have 100 end-users of my web application.
Each user is allowed to access a sub-set of products. For example, User 1 must access only Product A and Product B.
The problem is that my access control list may change in the security system on the fly. So if I connect the user access control to the star schema it may be outdated. In other words, I can have a security flaw if I keep a snapshot of user access control.

Any ideas?

Thanks a lot,

LR



LR

Posts : 5
Join date : 2010-08-16

View user profile

Back to top Go down

Re: User Access Control + Dimensional Model

Post  ngalemmo on Thu Sep 16, 2010 12:38 pm

Usually stuff like this is a bit easier to do in the BI layer. In a database, a common approach is to set up various schema with views and synonym references to the DW tables. You create views with built in filters to limit content. But it really depends on the database you are using.

In any case, it's a real pain to maintain...
avatar
ngalemmo

Posts : 3000
Join date : 2009-05-15
Location : Los Angeles

View user profile http://aginity.com

Back to top Go down

Re: User Access Control + Dimensional Model

Post  LAndrews on Thu Sep 16, 2010 12:52 pm

I'll assume your access control list contains the natural/business product identifier (e.g. SKU number).

From a dimensional model perspective, simply use the product identifier from your access list to filter on the product dimension. This will limit any query to the allowed products.

Depending on your BI toolset, there are numerous ways to implement this (database views, BI Metadata etc).

LAndrews

Posts : 132
Join date : 2010-05-13
Location : British Columbia, Canada

View user profile

Back to top Go down

Re: User Access Control + Dimensional Model

Post  Sponsored content


Sponsored content


Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum