KB14522: Security filters are not being applied to default prompt answers in MicroStrategy Developer and Web 9.x

SYMPTOM:
A user is able to see all the default prompt answers even when a security filter that should limit the elements has been applied In Strategy Developer and Web 9.x.
 
STEPS TO REPRODUCE:
Follow the steps below to reproduce the issue in the Strategy Tutorial project:
 

• Create a list element prompt for Distribution Center.
• Select a list of attributes as the default prompt answer, as shown below:
  

• Create a new report and place the prompt created above into the report filter. Add the attribute and a metric to the template.
• Create a security filter that filters on selected elements of the attribute. For this example, a security filter filters on the Distribution Centers of Seattle, Washington DC, and San Diego. Configure a user to have this security filter be applied.
• Log into the project as the user and execute the report. The prompt loads and shows only the allowed attribute elements in the left pane. However, all the default prompt answers are shown in the right hand side regardless of the security filter applied, as shown below:
  

• Executing the report will yield to the correct result applying security filters, as shown below:
  

CAUSE:
This is expected behaviour. The default prompt answers are saved in the metadata as part of the prompt definition. Security filters are currently not designed to be applied when retrieving object definitions (in this case - the definition of an object of type "Prompt"). Security filters are only enforced through the report execution (incl. element requests). This is why the second screenshot above shows only 3 attribute elements in the listbox on the left-hand side (i.e. security filter is applied to attribute elements retrieved from the warehouse) whereas the listbox on the right-hand side - default prompt answers - shows attribute elements which do not comply with the defined security filter (i.e. this list of attribute elements is part of the prompt definition).
 
ACTION:
Contact Strategy Technical Support if you have any further questions regarding this issue.
 
WORKAROUND:
The only available workaround is to not select default prompt answers that may conflict with security filters that exist in this project.
 
14522