Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 Development Tools
 Reporting Services Development
 Securing SSRS and other questions

Author  Topic 

foxprorawks
Starting Member

17 Posts

Posted - 2009-12-14 : 09:37:35
We are using SQL Server 2005 with Reporting Services.

We would like to give our customers access to the Report Builder, but we are having problems with security.

This is our scenario:

We have a server which can be accessed over the internet. Each customer has a database of their own and their own set of reports on Reporting Services.

Obviously, we don't want any customer to see any other customer's data.

Each customer would be allocated a unique Windows logon to the server, so that they can get access to the Report Builder and create reports.

This is where it gets tricky - having researched various web sites, I can restrict customers to a certain extent, but they seem to be able to navigate to any folder and save their report.

Ideally, I'd like the following to happen:

A customer navigates to our Reporting Services server and is asked to log in.
When he logs in, he can press the Report Builder button to create a report.
The user is only given a choice of one data connection - the one that connects to his data.
The user can only save the report to a specified folder, and can't navigate to other folders.

Our existing reports have various parameters, one of which can be used to filter the data. However, it isn't possible to create report parameters in Report builder.

Consequently, what I'd like to do is have a page in our system which allows the user to add one of his own reports built with Report Builder to the standard reports in the system. The page would have to only show the reports he has created and publish them to his folder in Reporting Services. In the process, the system would add parameters and code to handle the parameters (such as code to construct and run a sql statement for the report).

As a final question, in Reporting Services we have a folder for each customer, and that folder contains a sub-folder which contains the data connection. Is it possible to force Report Builder to look in this folder for the data connection?

Is this feasible?


   

- Advertisement -