The OneStream Community is temporarily frozen until June 29th due to the ongoing maintenance. Please read the blog post here to learn more.
Forum Discussion
Solved
Member List Business Rule in Data Access Security
Hi All,
We are implementing some updates to the security model in our application, and we are coming across some unfamiliar territory, so we're looking for some input. We are using OneStream versio...
I ran a quick test. Using a memberlist BR works and applies when you first save it. When you then change something in the BR, this is not reflected in the security access right away when you refresh e.g. your cube view. Your observation that this only refreshes every 24 hours is in line with IIS resetting every 24 hours. I restarted IIS myself after a change in the BR and the new security access was then applied in my test cube view.
The answers to your questions are as follows:
1. Yes, when changing the memberlist BR, you need to restart IIS (please note that this might log off active users)
1a. When you press save on the cube, except when you only change something in a BR, as the 'cube save button' does not account for that. For this you need to restart IIS.
1b. Yes, you are correct, the answer is: Performance.
2. Work locally on your laptop or your private cloud and restart IIS as needed. Migrate the final solution to the customers app in the end when testing is no longer required or kept to a minimum.
To restart IIS, I use the Internet Information Services (IIS) Manager on my laptop and press restart.
SAAS customer can press this button (Recycle App Pool) to restart IIS on a given server under System >> Environment:
FredLucas
OneStream Employee
OneStream EmployeeHi adykes,
I don't think the current Data Cell Security functionality was designed to allow for a dynamic set up hence it does not accept the use of XFBR rules etc.
I believe it currently refreshes on save of the Data Cell Access Security config.
Thanks,
Fred
Hey Fred, we actually got it working with a MemberList BR, but not an XFBR. I'm not sure why!
- FredLucas
Hi adykes, when you say that you got it working with a MemberList BR I'm assuming you got it to work for the initial set up but it does not automatically refresh if, for example, your flow members get updated right?
If I remember correctly the security will only update (re-run the MemberList BR) when you reset IIS or re-save the Data Cell Access Security set up. This means that we can't set it up in a dynamic way.
However, if all your set up is meant to be static and the use of the memberlist is only to ease the set up then you should be ok with that approach. In this case, bear in mind that in case of potential changes that could cause the memberlist BR to return a different list that's likely to only be taken into account the following day post the overnight IIS refresh.