I am launching the Report Builder from my web application. The launching works fine. The Report Builder displays all the models published on the Report Server, whereas the user launching the report builder doesnt have permission on most of the folders containing the models. The permission set on the folders individually (not inherit from parent) using Management Studio.
The Report Server and the Report Builder folder under that both are running with Integrated Windows Authentication.
Is there anything am missing to check ? I want the user should be able to see only those models, which he/she has been given permission to access.
For info, the web application from where the Report Builder is launched is using Forms Authentication. So, Anonymous Access is enabled. If this is the problem, can I create a separate web page and inside a folder (under website) and apply Integrated Windows Authentication to the folder and launch Report Builder from the web page. Will it work ?
Thanks in advance.
Users will only see the models to which they have been granted the View Models permission (part of the the Browser and Report Builder roles by default), with two exceptions:
1. Members of the local administrators group will always see all models on the Report Server regardless of permission settings.
2. If you launch Report Builder as a given user, then change the group membership of that user and re-launch the application, you will not see any changes in behavior because ClickOnce actually started a background process the first time around called dfsvc.exe, and this process is what actually launches the application both times. Since the background process doesn't get restarted, it is still running with the original security token, and is unaware of the change in group membership. In my experience, if you just kill the dfsvc.exe process and re-launch your application, everything works as expected the next time around.
|||This all sounds great, how do I, from my own website, launch report builder as a known user?|||Hi,
Did you have luck in launching the report builder from your site with a specific user security? I am also having the same challenge.
Any help will be appreciated.
|||Rajeeb,
May I ask you a question,
How do you setup the access right to enable the users only see their folders.
say for user A, he can only see Folder A
User B, can only see Folder B.
Folder A and B should be subfolders of Home. I tried to do it. but if I don't give user A the access to Home, it won't show report builder icon on the web page when I log in as user A.
Thanks
Jack
|||Hi Jack,You can setup access rights as per your example either after you login to Reporting Services using Management Studio or from Report Manager. You have to give permission to both A and B on Home, then in Folder A and B properties, remove the other user (dont follow the option of inheriting access rights from parent folder).
We have already moved on to implement Forms Authentication and handle security our own way. Our web application and report manager works perfectly fine. But, Report Builder using Forms Authentication has so many issues. We havent been successfully implement it yet, its been almost one year now.
I have put many topics on Report Builder using forms authentication but noone replies (just do a search on Report Builder Forms authentication). Its been really frustrating. Imagine after going live with 2 clients on same report server, having problem with Report Builder. We are stuck and nowhere now. We made a big mistake of selling the features of adhoc reports.
My suggestion is, wait for future releases (unless you are in a hurry).
Thanks.
|||
Rajeeb,
Thank you for your reply.
Could you please tell me what right you give user A and B on the Home folder. It seems to me you have to give them content manager right. otherwise the report builder icon won't show on the report manager web page.
Thank you for your help
Jack
that you can have a look at.