EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

KB13520: Security filters are being applied to users that have the privilege ‘Bypass all object security access checks’ in MicroStrategy Developer and Web 10.x


Stefan Zepeda

Salesforce Solutions Architect • Strategy


An Administrator has applied a security filter to the Everyone group that will only show Region = NE for all users. This will ensure that all users will only see data for the NE Region. The Administrator user has the privilege 'Bypass all object security access checks.' However, when executing a report that has a relationship to Region, the Administrator sees that the SQL is also having the security filter applied to it.

SYMPTOM:
An Administrator has applied a security filter to the Everyone group that will only show Region = NE for all users. This will ensure that all users will only see data for the NE Region, as shown below:

ka02R000000kc3GQAQ_0EM440000002FXo.jpeg

 
The Administrator user has the privilege 'Bypass all object security access checks.' However, when executing a report that has a relationship to Region, the Administrator sees that the SQL is also having the security filter applied to it, as shown below:
select a12.REGION_ID REGION_ID,
          max(a13.REGION_NAME) REGION_NAME,
          sum((a11.TOT_DOLLAR_SALES - a11.TOT_COST)) WJXBFS1
from CITY_CTR_SLS a11
         join LU_CALL_CTR a12
           on (a11.CALL_CTR_ID = a12.CALL_CTR_ID)
         join LU_REGION a13
           on (a12.REGION_ID = a13.REGION_ID)
where a12.REGION_ID in (2, 1)
group by a12.REGION_ID
CAUSE:
Security filters will always apply to all users regardless of the 'Bypass all object security access checks' privilege granted to the user. This privilege only grants Access Control List (ACL) bypass functionality.
However, an enhancement request has been logged for the functionality to disable a security role from being applied to specific users.
 
ACTION:
Strategy will continue to investigate and post updates as soon as they are available.
 


Comment

0 comments

Details

Knowledge Article

Published:

May 31, 2017

Last Updated:

May 31, 2017