fixed security in olap.java