
Chapter 7. Dimensional security 149
Grant options
Grant options have the following characteristics:
The member expression defines the members that users, if granted access to this filter,
are allowed access.
Ancestors of granted members, if not explicitly granted, are treated as visible ancestors.
All other members are implicitly denied.
Scope options for Grant:
– Grant members: Only the members that are specified in the member expression are
allowed.
– Grant members and descendants: The members that are specified in the member
expression and all their descendants are allowed.
– Grant members and ancestors: The members that are specified in ...