We've completely separated the dimension tables from the fact tables. They could be on separate servers if I wanted.

This was a bit nerve racking at first, I will admit. Adding triggers to the dim tables to prevent deletes helped.

Also access to the dim data is only through the SSIS package or the SSAS account.