DeepSee: Setting up security - Part 4 of 5

In part 1, part 2, and part 3 of this series we set up three user types. In this part of the tutorial we see how to secure model elements (such as DeepSee cubes) and DeepSee items (such as a folder containing pivot tables and dashboards in the DeepSee User Portal). 

Secure cubes and DeepSee items

DeepSee allows developers to secure model elements (i.e. cubes, subject areas, pivot tables, dashboards, KPIs, listings, listing fields). In this tutorial one of the cubes defined in the APP namespace is the INVOICES cube. In this section we will see how to secure the INVOICES cube so that pivot tables and dashboards based on this cube can only be accessed by power users and administrators (but not by simple users). 
Another task performed in this section is to secure pivot tables and dashboard stored in the Admin folder. We will see how to let only power users and administrators to access pivot tables and dashboards in the Admin folder. 

Create visibility roles

To secure all pivot and dashboards DeepSee elements (e.g. pivot tables, dashboards, KPIs) based on the INVOICES cube and the Admin DeepSee folder, create in the Roles page the following visibility roles with no public permissions:

To secure the cube, navigate to the INVOICES cube in architect. Click on the light blue bar in the central panel. In the Details panel on the right select cInvoices under Resource. Compile the cube.

 To secure the DeepSee items in the Admin folder, navigate to Folder Manager and click on the Admin folder. In the Details box on the left under Resource select fAdmin and save.

Create a DSInvoices role

Next, add the two visibility roles we just created to a new DSInvoices role. 

Extend poweruser and the Admin user

Assign the DSInvoices role to poweruser and the Admin users, but not to simpleuser.

Test the users

Open an incognito/private window of your browser and log in with simpleuser, poweruser, and Admin. Navigate to Analyzer and User Portal and confirm that the Admin folder is visible for poweruser and Admin but not for simpleuser. As shown in the example below, simpleuser can only see pivot tables and dashboards outside the Admin folder that not based on the INVOICES cube ("Fun facts" and "Pivot" in the example below): 

In the last part of these series we will conclude with some remarks and troubleshooting tips, including how to "hide" pivot tables in User Portal.