PH31766: CANNOT SET SECURITY IN DATA MODULE FOR FACT TABLES BASED ON ATTRIBUTE IN DIMENSION TABLE VIA EXPRESSION EDITOR

APAR status

• Closed as Permanent restriction.

Error description

• It is not possible to secure a fact table based on an attribute
  from a dimension via expression editor.
  In this case , you get the error : In module "tempModule", the
  following query subjects are not joined:... while in fact they
  are ( star schema)
  

Local fix

• we can work around by creating views
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * n/a                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * see formal description                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• When creating a security filter and defining its expression via
  ExpressionEditor, it is possible to reference a table that is
  not the current table for the filter. The syntax to reference
  another table uses an IN clause with an expression that contains
  the needed filter condition. In most cases a `CASE` statement
  will be the easiest, but you could also make use of an IF THEN
  ELSE statement. The 'CASE' statement is used in the IN predicate
  of a filter condition. This will cause the generation of a
  subquery, which does not require to be joined to the original
  table.
  As an example, if table 'employee' needs to be secured using the
  table 'department' , then an example filter expression to set
  column 'department_id' to '2' is:
  department_id IN (CASE WHEN department.department_id=2 THEN
  department.department_id END)
  Reference:
  
  https://www.ibm.com/docs/en/cognos-analytics/11.1.0?topic=source
  s-securing-data
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels