Friday, March 30, 2012
ReportBuilder Issues w/ Form Authentication
If the only thing you are worried about is Report Builder access you can control through through a link in your own solution as well. All the button does is launch http://yourservername/ReportServer/ReportBuilder/ReportBuilder and let the click-once app take over. You would may still need to fix your auth class to save anything though.
ReportBuilder default save folder is Reportserver/Models
When any user has created a report (based on a published model) using
ReportBuilder and wants to save it, the default save location is
../Reportserver/Models and not (as I expected) the root folder.
1) As far as I know the default save folder should be the root folder
(/Reportbuilder). Is that correct?
1-1) If yes - What causes this "misbehaviour"
2) Is it possible to change the default save folder to root (or maybe even
"My Reports")?
SW:
Windows Srv 2003 R2 SP1 - 64bit
SQL 2005 SP2 - 64bit
Thanks for any answers or comments!
PeterIf i am reading this correct
Right click the folder in solution explorer and change the default
folder location to My Reports
Cheers|||Hi!
I'm not sure if you get me right - or I get you wrong :-)
Thx for your reply.
> If i am reading this correct
Just to make it clear: I am not talking about where to publish the solution,
but where Report Builder tries to save a newly create report.
> Right click the folder in solution explorer and change the default
> folder location to My Reports
Please explain what folder I should right click?
If I open the project in VS 2005 the structure is
Project name
Data Sources
xxxxx.ds
Data Source views
xxxxx.dsv
Report Models
xxxxxxxx.smdl
Best regards,
Peter
-- Original Message --
From: "blueboy" <matt_meech@.hotmail.com>
Newsgroups: microsoft.public.sqlserver.reportingsvcs
Sent: Monday, June 18, 2007 10:43 AM
Subject: Re: ReportBuilder default save folder is Reportserver/Models
> If i am reading this correct
> Right click the folder in solution explorer and change the default
> folder location to My Reports
> Cheers
>
"blueboy" <matt_meech@.hotmail.com> wrote in message
news:1182156196.524637.78530@.m36g2000hse.googlegroups.com...
> If i am reading this correct
> Right click the folder in solution explorer and change the default
> folder location to My Reports
> Cheers
>
reportbuilder clickonce
Does anyone know which permissions our users will need in order to let
reportbuilder install from the SSRS homepage?
I have read that the clickonce process should make this smooth, BUT when we
try this, the reportbuilder does not install unless "local
administrator"-permissions are assigned to the users. According to the log,
the deployment process is trying to write to the registry - and this is
probably what makes the app require admin-permissions.
Strange - since Ive read an MS-article stating that the users should not
need these permissions.
Anyone has any comments ?
DavidOn Feb 22, 8:49=A0am, "David"
<david_sundstrom_sandegard.nos...@.hotmail.com> wrote:
> Hello!
> Does anyone know which permissions our users will need in order to let
> reportbuilder install from the SSRS homepage?
> I have read that the clickonce process should make this smooth, BUT when w=e
> try this, the reportbuilder does not install unless "local
> administrator"-permissions are assigned to the users. According to the log=,
> the deployment process is trying to write to the registry - and this is
> probably what makes the app require admin-permissions.
> Strange - since Ive read an MS-article stating that the users should not
> need these permissions.
> Anyone has any comments ?
> David
David,
What I did was go into Site Settings and create a new System Role
called ReportBuilderUser with just the Execute Report Definition task
assigned. After that it was just a case of assigning that role to the
individuals or groups that need to see the Report Builder button in
Report Manager.
Don't feel bad about needing help on this. Unless it's changed, the
MS documentation for this is not clear.
HTH
toolman|||Hi toolMan, thx for answering!
Thing is that in order for ReportBuilder application to install, the user
seem to need some permissions on their LOCAL computer (not the server
site-wide settings-stuff).
The ReportBuilder app seems to write to some registry-keys and in order to
do this, the users seems to need to be local adminstrators of their
machines.
Does anyone recognize this?
"toolman" <timd@.infocision.com> wrote in message
news:d7250e41-06f3-45e4-bf04-fa4e1ccf0330@.41g2000hsc.googlegroups.com...
On Feb 22, 8:49 am, "David"
<david_sundstrom_sandegard.nos...@.hotmail.com> wrote:
> Hello!
> Does anyone know which permissions our users will need in order to let
> reportbuilder install from the SSRS homepage?
> I have read that the clickonce process should make this smooth, BUT when
> we
> try this, the reportbuilder does not install unless "local
> administrator"-permissions are assigned to the users. According to the
> log,
> the deployment process is trying to write to the registry - and this is
> probably what makes the app require admin-permissions.
> Strange - since Ive read an MS-article stating that the users should not
> need these permissions.
> Anyone has any comments ?
> David
David,
What I did was go into Site Settings and create a new System Role
called ReportBuilderUser with just the Execute Report Definition task
assigned. After that it was just a case of assigning that role to the
individuals or groups that need to see the Report Builder button in
Report Manager.
Don't feel bad about needing help on this. Unless it's changed, the
MS documentation for this is not clear.
HTH
toolman
reportbuilder button not appearing
I am not getting the reportbuilder button on the toolbar in report
server portal. I have implemented forms security on the reporting
services instance.
Can anyone please help me solve this problem?
Thanks in advance,
BharathHi All,
I got the resolution for this problem. I was implementing the sample
from SQL 2000 on an SQL 2005 platform. After implementing the forms
authentication using the sources from SQL 2005 the button is
appearing...
Bharath
bharath wrote:
> Hi Everyone,
> I am not getting the reportbuilder button on the toolbar in report
> server portal. I have implemented forms security on the reporting
> services instance.
> Can anyone please help me solve this problem?
> Thanks in advance,
> Bharath
ReportBuilder authentication
I am using the Report Builder in my application. When it is opened from an environment where there is no proxy, it is asking for authentication and it is working properly.
But when it is opened from the client environment where there is proxy, it is not asking for authentication and he cannot select or view any source of data.
How can I force the Report Builder in the client environment to prompt for authentication? If this cannot work, is there any other possible solution? (Not that it is not allowed to open the port)
Thank you in advance.
Hi,
As you mentioned, the only difference is set the proxy or not, right? Based on my knowledge, I don't think it would affect the behavior of Forms Authentication.
Could you help to check on the following points:
? If you use Forms Authentication, anonymous access must be enabled on the report server virtual directory in Internet Information Services (IIS).
? ASP.NET authentication must be set to Forms. You configure ASP.NET authentication in the Web.config file for the report server.
? Reporting Services can authenticate and authorize users with either Windows Authentication or custom authentication, but not both. Reporting Services does not support simultaneous use of multiple security extensions.
Thanks.
Will that affect the reports?
|||Hi,
? If you use Forms Authentication, anonymous access must be enabled on the report server virtual directory in Internet Information Services (IIS).
? ASP.NET authentication must be set to Forms. You configure ASP.NET authentication in the Web.config file for the report server.
? Reporting Services can authenticate and authorize users with either Windows Authentication or custom authentication, but not both. Reporting Services does not support simultaneous use of multiple security extensions.
These actions take effect on the reporting servcie site level. It's for the security on reporting servcie site. So it won't affect the detail reports.
Thanks.
sqlReportBuilder and Forms Authentication
We created a custom security extension for RS using Forms Authentication. The issue I am having is in ReportBuilder when the forms authentication ticket expires. Forms auth will attempt to redirect (send a HTTP 302) and the report builder will show the error message "Object moved to here" instead of prompt for credentials. I have been watching the IIS logs and I see the first time report builder start it attempt to connect using default windows credentials and after the FormsAuthenticationRequired exception it will prompt for credentials and invoke LogonUser method, but this only happens the first time or if change the server in the url. I was expecting ReportBuilder to consider the Forms Authentication expiration at any time.
Do you have any idea how to work around this?
Any help is really appreciated.
Thanks
Hope this helps. http://connect.microsoft.com/SQLServer/feedback/ViewFeedback.aspx?FeedbackID=278056RS using FBA deletes a cookie that is used in authenticating user. The fix is available on request( not released officially)
|||
Thanks for your response. I saw this fix before writing in this forum. (I found it here http://support.microsoft.com/kb/939942/ ) What I am concerned is that it is touching only the sharepoint dll. I am not using sharepoint. I do not even have RS configured for sharepoint integration. I am using Forms Authentication in the ReportServer and ReportBuilder displays the "object moved" error when the authentication ticket expires and gets a HTTP redirect while requesting a method in the web service after ticket expired. I suspect this is a bug. To workaround this I had to increase the timeout of the forms authentication in the web.config for ReportServer to 48 hours.
However if a user keeps a report open in the ReportBuilder application for more than 48 hours the changes will be lost because he will get the error and will not be able to save the changes. I think this is a bug. Microsoft has been saying Reporting Service 2005 supports Forms Authentication thru a custom security extension but I am not sure they have tested properly.
I have been inspecting the code for ReportBuilder application using .net Reflector and I noticed it prompts for credentials only when the main form is loaded and the first attemp using default Network Credentials fails because Forms Authentication is required. Then the LogonUser is invoked and the authentication cookie is created. However if this cookie expires they never attempt to connect again unless the server path change. In my opinion this is wrong. They should be consistent with the forms authentication and prompt for credentials again.
Increase the timeout in my opinion is a workaround but not the solution. If I am wrong and someone knows the answer to this, please, I will really appreciate it. In the other hand, I will try to get this fix for sharepoint. Maybe it will consist in more than sharepoint dll and it will "automagically" fix the issue
Thanks for your reply.
ReportBuilder 2005 and non-SSL
work. Everything is on a single XP computer. There are two possible
issues I can think of:
1. I've installed this "side-by-side" with an instance of SQL Server
2000 and Reporting Services 2000. Thus the virtual directories
localhost/Reports and ReportServer are already in use. I configured the
2005 to use Reports2 and ReportServer2.
2. There is no SSL certificate on my machine. I was hoping just to run
everything via http:. I noticed when I installed that the setup dialog
told that I had a certificate (!) and so it was going to install things
for SSL. However if I look in RSReportServer.config, I see <Add
Key="SecureConnectionLevel" Value="0"/>, which I believe means no SSL.
When I try to download reportbuilder from the Report Manager page, it
tells me that the download has been interrupted. If I just try to
execute the report builder .exe from the web directory, it does start
up and presents me with a user name/password dialog box. If I fill this
in and press OK, it tells me "No report server was found at
https://localhost/reportserver. That is, it is looking at the wrong
virtual directory and using the wrong protocol.
Is there some way to configure ReportBuilder so it uses a non-default
URL for the report server? Can I even use the CTP version without a
certificate?
Thanks...MikeDid you find the solution? I am having the same problem.
mike@.kraley.com wrote:
> I've installed SQL Server 2005 CTP and I can't get ReportBuilder to
> work. Everything is on a single XP computer. There are two possible
> issues I can think of:
> 1. I've installed this "side-by-side" with an instance of SQL Server
> 2000 and Reporting Services 2000. Thus the virtual directories
> localhost/Reports and ReportServer are already in use. I configured the
> 2005 to use Reports2 and ReportServer2.
> 2. There is no SSL certificate on my machine. I was hoping just to run
> everything via http:. I noticed when I installed that the setup dialog
> told that I had a certificate (!) and so it was going to install things
> for SSL. However if I look in RSReportServer.config, I see <Add
> Key="SecureConnectionLevel" Value="0"/>, which I believe means no SSL.
> When I try to download reportbuilder from the Report Manager page, it
> tells me that the download has been interrupted. If I just try to
> execute the report builder .exe from the web directory, it does start
> up and presents me with a user name/password dialog box. If I fill this
> in and press OK, it tells me "No report server was found at
> https://localhost/reportserver. That is, it is looking at the wrong
> virtual directory and using the wrong protocol.
> Is there some way to configure ReportBuilder so it uses a non-default
> URL for the report server? Can I even use the CTP version without a
> certificate?
> Thanks...Mike
ReportBuilder : Download Error
I am having problem running Report Builder. Error summary says this.
ERROR SUMMARY
Below is a summary of the errors, details of these errors are listed later in the log.
* Activation of http://rs.mycompany.com/ReportServer/ReportBuilder/ReportBuilder.application resulted in exception. Following failure messages were detected:
+ Downloading http://rs.mycompany.com/ReportServer/ReportBuilder/ReportBuilder.application did not succeed.
+ Unable to connect to the remote server
+ An established connection was aborted by the software in your host machine
It was working like Champ couple of days back. There has been some firewall policy changes happened between today and day it worked. I am suspecting something to do with firewall. But I am not sure. somebody please help.
Pleaseeee HELP!
Thanks,
have you tried changing the security of the report builder virtual folder to anonymous?
ReportBuilder & FQDN
Anyone run into this?
ReportBuilder fails to load when using a FQDN (fully qualified domain name) URL.
ie: http://servername.xyz.company.com/Reports/Pages/Folder.aspx
ReportBuilder loads with no issue when using the shortname URL.
ie: http://servername/Reports/Pages/Folder.aspx
details:
ERROR SUMMARY
Below is a summary of the errors, details of these errors are listed later in the log.
* Activation of http://servername.xyz.company.com/ReportServer/ReportBuilder/ReportBuilder.application resulted in exception. Following failure messages were detected:
+ Downloading http://servername.xyz.company.com/ReportServer/ReportBuilder/ReportBuilder.application did not succeed.
+ The remote server returned an error: (403) Forbidden.
COMPONENT STORE TRANSACTION FAILURE SUMMARY
No transaction error was detected.
WARNINGS
There were no warnings during this operation.
Nevermind Figured it out -
Modify RSWebApplication.config for Hard IP.
<ReportServerUrl>http://<Site IP Address>/ReportServer</ReportServerURL>
<ReportServerVirtualDirectory></ReportServerVirtualDirectory>
Works - just recycle the application pools in IIS. By the way if you are configuring the manager for a non-default IP address be carefull. For some reason the report manager does not like a <ReportServerVirtualDirectory> value if <ReportServerURL> is supplied.
ReportBuilder
When I launch it I get the message
An unhandled exception of type
'Microsoft.SqlServer.ReportingServices2005.RSConnection.MissingEndpointException' occurred in ReportBuilder.exe
Additional information: The attempt to connect to the report server failed.
Check your connection information and that the report server is a compatible
version.
Any ideasRoland,
Which build of SQL Server 2005 are you using?
Which OS?
Was it a clean install or after uninstall of earlier builds?
I don't recall seeing this specific error reported before although
there were some problems with early builds of Report Builder.
You might want to visit
http://lab.msdn.microsoft.com/productfeedback/default.aspx and search
for any similar reports.
Andrew Watt
MVP - InfoPath
On Sat, 15 Oct 2005 01:13:01 -0700, Roland
<Roland@.discussions.microsoft.com> wrote:
>I installed RS 2005 on my machine. Everything works except the reportbuilder.
>When I launch it I get the message
>An unhandled exception of type
>'Microsoft.SqlServer.ReportingServices2005.RSConnection.MissingEndpointException' occurred in ReportBuilder.exe
>Additional information: The attempt to connect to the report server failed.
>Check your connection information and that the report server is a compatible
>version.
>Any ideas|||I installed it from the MSDN Visual Studio 2005 Beta 2 DVD
Select @.@.version in SQL gives
Microsoft SQL Server 2005 - 9.00.1116 (Intel X86)
Apr 9 2005 20:56:37
Copyright (c) 1988-2004 Microsoft Corporation
Beta Edition on Windows NT 5.1 (Build 2600: Service Pack 2)
The reportbuilder.exe : version 9.0.1116.0, assembly version 9.0.242.0
Installed on a Windows XP (with SP2) machine
Is it possible that the fact my installed OS is Dutch, is causing the
problem ?
"Andrew Watt [MVP - InfoPath]" wrote:
> Roland,
> Which build of SQL Server 2005 are you using?
> Which OS?
> Was it a clean install or after uninstall of earlier builds?
> I don't recall seeing this specific error reported before although
> there were some problems with early builds of Report Builder.
> You might want to visit
> http://lab.msdn.microsoft.com/productfeedback/default.aspx and search
> for any similar reports.
> Andrew Watt
> MVP - InfoPath
> On Sat, 15 Oct 2005 01:13:01 -0700, Roland
> <Roland@.discussions.microsoft.com> wrote:
> >I installed RS 2005 on my machine. Everything works except the reportbuilder.
> >When I launch it I get the message
> >An unhandled exception of type
> >'Microsoft.SqlServer.ReportingServices2005.RSConnection.MissingEndpointException' occurred in ReportBuilder.exe
> >
> >Additional information: The attempt to connect to the report server failed.
> >Check your connection information and that the report server is a compatible
> >version.
> >
> >Any ideas
>|||Hi
That was the April CTP.
Between then and now, there were 2 more CTP's. Probably a bug with that old
version.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Roland" <Roland@.discussions.microsoft.com> wrote in message
news:CE1A6B37-EFE2-4537-A39A-0016A7B7A503@.microsoft.com...
>I installed it from the MSDN Visual Studio 2005 Beta 2 DVD
> Select @.@.version in SQL gives
> Microsoft SQL Server 2005 - 9.00.1116 (Intel X86)
> Apr 9 2005 20:56:37
> Copyright (c) 1988-2004 Microsoft Corporation
> Beta Edition on Windows NT 5.1 (Build 2600: Service Pack 2)
> The reportbuilder.exe : version 9.0.1116.0, assembly version 9.0.242.0
> Installed on a Windows XP (with SP2) machine
> Is it possible that the fact my installed OS is Dutch, is causing the
> problem ?
> "Andrew Watt [MVP - InfoPath]" wrote:
>> Roland,
>> Which build of SQL Server 2005 are you using?
>> Which OS?
>> Was it a clean install or after uninstall of earlier builds?
>> I don't recall seeing this specific error reported before although
>> there were some problems with early builds of Report Builder.
>> You might want to visit
>> http://lab.msdn.microsoft.com/productfeedback/default.aspx and search
>> for any similar reports.
>> Andrew Watt
>> MVP - InfoPath
>> On Sat, 15 Oct 2005 01:13:01 -0700, Roland
>> <Roland@.discussions.microsoft.com> wrote:
>> >I installed RS 2005 on my machine. Everything works except the
>> >reportbuilder.
>> >When I launch it I get the message
>> >An unhandled exception of type
>> >'Microsoft.SqlServer.ReportingServices2005.RSConnection.MissingEndpointException'
>> >occurred in ReportBuilder.exe
>> >
>> >Additional information: The attempt to connect to the report server
>> >failed.
>> >Check your connection information and that the report server is a
>> >compatible
>> >version.
>> >
>> >Any ideas|||Roland,
April CTP was, if I remember correctly, only the second public build
with Report Builder in it. I remember having problems connecting to
Report Builder in one early build but don't remember if it was April
CTP.
If you have access to MSDN or BetaPlace I suggest you update to
September CTP. You will need a matching copy of Visual Studio 2005
(which is the VS2005 Release Candidate).
Uninstall order of the April CTP is VERY important. Read the Sept CTP
/ Visual Studio 2005 RC documentation CAREFULLY.
After a successful uninstall, the install order is SQL Server 2005
Sept CTP first then Visual Studio 2005 Release Candidate.
Andrew Watt
MVP - InfoPath
On Sun, 16 Oct 2005 11:13:01 -0700, Roland
<Roland@.discussions.microsoft.com> wrote:
>I installed it from the MSDN Visual Studio 2005 Beta 2 DVD
>Select @.@.version in SQL gives
>Microsoft SQL Server 2005 - 9.00.1116 (Intel X86)
> Apr 9 2005 20:56:37
> Copyright (c) 1988-2004 Microsoft Corporation
> Beta Edition on Windows NT 5.1 (Build 2600: Service Pack 2)
>The reportbuilder.exe : version 9.0.1116.0, assembly version 9.0.242.0
>Installed on a Windows XP (with SP2) machine
>Is it possible that the fact my installed OS is Dutch, is causing the
>problem ?
>"Andrew Watt [MVP - InfoPath]" wrote:
>> Roland,
>> Which build of SQL Server 2005 are you using?
>> Which OS?
>> Was it a clean install or after uninstall of earlier builds?
>> I don't recall seeing this specific error reported before although
>> there were some problems with early builds of Report Builder.
>> You might want to visit
>> http://lab.msdn.microsoft.com/productfeedback/default.aspx and search
>> for any similar reports.
>> Andrew Watt
>> MVP - InfoPath
>> On Sat, 15 Oct 2005 01:13:01 -0700, Roland
>> <Roland@.discussions.microsoft.com> wrote:
>> >I installed RS 2005 on my machine. Everything works except the reportbuilder.
>> >When I launch it I get the message
>> >An unhandled exception of type
>> >'Microsoft.SqlServer.ReportingServices2005.RSConnection.MissingEndpointException' occurred in ReportBuilder.exe
>> >
>> >Additional information: The attempt to connect to the report server failed.
>> >Check your connection information and that the report server is a compatible
>> >version.
>> >
>> >Any ideas|||Installing the Sept CTP Release of SQL 2005 did solve my problem of using the
reportbuilder. Indeed the installation order is important; as I also have SQL
2000 with Reporting Services 2000/SP2 on the same machine I had to reinstall
also the SP2 of RS 2000 because the uninstall of the version of RS2005 also
influences the behaviour of RS2000
"Andrew Watt [MVP - InfoPath]" wrote:
> Roland,
> April CTP was, if I remember correctly, only the second public build
> with Report Builder in it. I remember having problems connecting to
> Report Builder in one early build but don't remember if it was April
> CTP.
> If you have access to MSDN or BetaPlace I suggest you update to
> September CTP. You will need a matching copy of Visual Studio 2005
> (which is the VS2005 Release Candidate).
> Uninstall order of the April CTP is VERY important. Read the Sept CTP
> / Visual Studio 2005 RC documentation CAREFULLY.
> After a successful uninstall, the install order is SQL Server 2005
> Sept CTP first then Visual Studio 2005 Release Candidate.
> Andrew Watt
> MVP - InfoPath
> On Sun, 16 Oct 2005 11:13:01 -0700, Roland
> <Roland@.discussions.microsoft.com> wrote:
> >I installed it from the MSDN Visual Studio 2005 Beta 2 DVD
> >Select @.@.version in SQL gives
> >
> >Microsoft SQL Server 2005 - 9.00.1116 (Intel X86)
> > Apr 9 2005 20:56:37
> > Copyright (c) 1988-2004 Microsoft Corporation
> > Beta Edition on Windows NT 5.1 (Build 2600: Service Pack 2)
> >
> >The reportbuilder.exe : version 9.0.1116.0, assembly version 9.0.242.0
> >
> >Installed on a Windows XP (with SP2) machine
> >Is it possible that the fact my installed OS is Dutch, is causing the
> >problem ?
> >
> >"Andrew Watt [MVP - InfoPath]" wrote:
> >
> >> Roland,
> >>
> >> Which build of SQL Server 2005 are you using?
> >>
> >> Which OS?
> >>
> >> Was it a clean install or after uninstall of earlier builds?
> >>
> >> I don't recall seeing this specific error reported before although
> >> there were some problems with early builds of Report Builder.
> >>
> >> You might want to visit
> >> http://lab.msdn.microsoft.com/productfeedback/default.aspx and search
> >> for any similar reports.
> >>
> >> Andrew Watt
> >> MVP - InfoPath
> >>
> >> On Sat, 15 Oct 2005 01:13:01 -0700, Roland
> >> <Roland@.discussions.microsoft.com> wrote:
> >>
> >> >I installed RS 2005 on my machine. Everything works except the reportbuilder.
> >> >When I launch it I get the message
> >> >An unhandled exception of type
> >> >'Microsoft.SqlServer.ReportingServices2005.RSConnection.MissingEndpointException' occurred in ReportBuilder.exe
> >> >
> >> >Additional information: The attempt to connect to the report server failed.
> >> >Check your connection information and that the report server is a compatible
> >> >version.
> >> >
> >> >Any ideas
> >>
>sql
Reportbuilder
even if yu don´t wanna code something within the reporting services). In
Europe that´ll be about 100? for single licence.
--
HTH, Jens Suessmeyer.
--
http://www.sqlserver2005.de
--
"Michael Vardinghus" <michaelvardinghus@.hotmail.com> schrieb im Newsbeitrag
news:udz2HgFcFHA.3620@.TK2MSFTNGP09.phx.gbl...
> Where can I get this for SQL Server 2000 ?
>
reportbuilder
available with 2000 ?No.
It is a 2005 feature only.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Michael Vardinghus" <michaelvardinghus@.hotmail.com> wrote in message
news:et1II5VkFHA.2852@.TK2MSFTNGP15.phx.gbl...
> in rep s 2005 there is a reportbuilder - anybody know if this will be
> available with 2000 ?
>
Saturday, February 25, 2012
Report server database security question
I am currently the only Reportbuilder / Contentmanager / Publisher and admin in the Report server database. I am using windows authentication when creating subscriptions and saving them in this database. Some of the reports that i create have very sencitive information. What risks and procautions do i need to assess if i want to add another reportbuilder / content manager that can manage subscriptions? The main thing is I do not want the other builder and content manager to see my report information. is it just meta data that it holds or do i need to worrie about the data also? if so what do others do to block them from viewing other peoples data?
Summery : I just want them to see data that is relevent to their work and not mine. Is this even an issue? I know it will save query results if i do a snapshot.
I read something concering this in Brian Larson's Reporting Services 2005 book
I think basically you're stuck with Windows Authentication if you want everyone to see only their own stuff (and control their permissions in SQL server)
Ours have shared data source with one account into SQL Server, security is only at the RS folder level
but the situation is different than yours as in our environment, everyone sees the same thing (e.g. all managers see one report)
|||Thanks, hopefully i can gather some more info on this. It seems to me that this is not an uncommon need with reporting services.
Brian
|||Hi,There are probably different layers of access control here.
For starters, you have to use stored procedures to generate the report data and not use cache and filters. This way, your SP can check the user credential at runtime and deliver only the parameters values and the slice of data this user is allowed to access. Always pass the userid as sp parameter.
This is on the top of the ReportManager folder security.
To achieve this you will probably want to use only Windows group membership info, no SQL Server logins. yo have to either query LDAP/AD or maintain a local table of groups, users and group membership.
you would also have to create a couple SQL server application accounts, one for each report builder, then I think you can control access to various schema's so another report builder cannot see tables in your confidential schema (or database).
As far as subscriptions are concerned I believe that only meta data is stored in the ReportServer database. Unless your metadata is confidential, I do not think you have to care about this. you may just want to make sure one cannot create subscriptions for someone else and make sure no subscriptions will ever be sent to expired accounts.
You may also want to explore the config files to see what options you have as limiting access to subscriptions and access to domains.
This is not a very precise answer however your question is broad, so I cannot do better than giving hints.
Philippe|||
Do you know if actual data is kept in the Report server database ? I know snap shots are and from what I understand they would have data in them but other than that do you know if any quried data would be kept in there. I am not conserned with others seeing meta data for the report so at least that is not an issue.
Brian
|||anyone else