Ok heres the problem...
I have been requested to have some security 'features' included in my reports.
The main requirements are:
1 - Remove the address bar at the top, as the user will be able to alter
parameters in here.
2 - Disable the F11 key. this is because even if the report opens with no
addres bar present in a simple window, they can still press F11 and it will
return. pressing this key restores the toolbar and URL.
3 - Disable Right Click, as they user can then view the source, and
therefore view the address, with parameters.
The whole point is to disable the alteration of parameters in the reports.
Any ideas?
Thanks in advance, Rob.How are the reports parameterized in the first place?
You could put all parameters into dropdownlists, if the users should be able
to choose some parameters. This way your report just won't render if they
try to hard code the parameter through the URL. THis would solve most of
your problems, I think.
If your users are not supposed to change any parameters, you could create a
parameter table in the data source data base, which gives you a set of
parameters that each user is supposed to see. No way to change it on the
outside, but a bit more for the report administrator or someone else to do.
Kaisa M. Lindahl Lervik
"MACNR" <MACNR@.discussions.microsoft.com> wrote in message
news:9FCABD33-168F-4487-A2DC-41E40D82FA1D@.microsoft.com...
> Ok heres the problem...
> I have been requested to have some security 'features' included in my
> reports.
> The main requirements are:
> 1 - Remove the address bar at the top, as the user will be able to alter
> parameters in here.
> 2 - Disable the F11 key. this is because even if the report opens with no
> addres bar present in a simple window, they can still press F11 and it
> will
> return. pressing this key restores the toolbar and URL.
> 3 - Disable Right Click, as they user can then view the source, and
> therefore view the address, with parameters.
> The whole point is to disable the alteration of parameters in the reports.
> Any ideas?
> Thanks in advance, Rob.
No comments:
Post a Comment