pentaho/mondrian — pull request #168 by mkambol (2013-10-25 14:25:54+00:00)
Title: [MONDRIAN-1766]  Role restrictions are not honored in some cases if the number of MemberGrants exceeds the maxconstraints property value

This change introduces a final pass filter of the tuple list generated by NativeSet to assure that all items in the list are accessible. Since this could be costly, it short-circuits the checks except where one or more hierarchies actually have a role restriction defined.

@lucboudreau - The test in this commit shows the issue I was describing a couple days ago. If role predicates cannot be pushed into an IN list then the role restriction is omitted altogether. If this looks like a reasonable fix,
it will also make it possible to address MONDRIAN-1694.