3698793 - DAC not applied in analytical model variable value help when "show unbooked data" is disabled

Data access control(DAC) is applied on a dimension view and the view is associated with the dimension in analytical model. A variable is added based on dimension A in the analytic model. Preview the Analytic model, in the variable value help dialogue of dimension A, when the "show unbooked members" option is enbled, data access control works as expected that only the authorized data are visible. However, when the "show unbooked members" option is disabled, some other values are displayed regardless of the data access control.

1. Open the analytical model.
2. Click on 'Preview'.
3. In variable screen, click on value help button of the variable of dimension A. 
4. In Select Members dialogue, when the "show unbooked members" option is enabled, data access control works as expected that only the authorized data are visible. 
5. Disable the "show unbooked members" option, some other values are displayed regardless of the data access control.

This symptom is an expected behavior. Even though the dimension view is protected by Data Access Control, the transactional data in fact source is not. When the "show unbooked members" toggle is disabled, the value help in the analytic model preview fetches data from the fact source. Since the foreign key values from the fact source associated with the dimension are not filtered out by the data access control, values will be displayed in value help result regardless of DAC. 

Following workaround can be considered to avoid the symptom, please chose one of them:

1. Move the DAC from the dimension view to the analytical model, mapping DAC to the corresponding analytical model attribute.
2. Move the DAC from the dimension view to the fact view, mapping DAC to the corresponding fact view attribute.
3. If the DAC needs to remain in the dimension view, re-apply the same DAC to the analytical model (as per option 1) or to the fact view(as per option 2).

data access, booked values, transactional data, prompt screen, list of values, security issue, unauthorized data, allowed data, filtering, fact source , KBA , DS-SEC-DAC , Security – Data Access Control , Problem