SYMPTOM:
Using security roles, it is possible to assign or deny the privilege to use Strategy Web to only one of the projects, while the 'Use Desktop' privilege can be granted at the user level and will apply to all projects. This will guarantee that the user can log in via Strategy Desktop to all projects, but can only log in to the project he has the 'Use Web' privilege for in Strategy Web 10.x.
Unfortunately, the current behavior is that even when Strategy Web 10.x is configured to log in first then display projects, Strategy Intelligence Server 10.x still returns all projects (including the ones the user has no Use Web privilege for). However, the user will only be able to connect to those projects to which he has access, otherwise he will get a message indicating that he requires the Web user privilege to log in, as shown below:
In other words, Strategy Web displays all the projects to which the user has access so in order to hide any of them it is necessary to deny the access to it as stated in the following Strategy Knowledge Base technical note:
KB5519 - How to hide a project name to some users in Strategy Web 9.x
In order to allow or deny access to a specific project using a security role, refer to the following Strategy Knowledge Base technical note:
KB14002 - How to deny access to a Strategy project to a user or user group in Strategy Developer 10.x
46480
