Friday, March 9, 2012

Report builder and custom security

We need to implement SQL Server 2005 Report Builder using our own security
model. We use application level authentication, in which a user ID and
password is verified against a record in the sql server database. So, we
don't use Windows Authentication. The problem is that we need to implement
the reporting builder as our ad-hoc reporting tool, but we need each user to
have his own private folder on the server. I've found only four articles on
http://msdn2.microsoft.com which talks about custom security extension, but
none of those is even close to what I'm looking for. I'm sure that there're
folks out there who've done this before.
Any suggestion or lead will be greatly appreciated.
Thanks,
Gilgameshhave you activated the "My Reports" option in reporting services?
this create a /My Reports folder and each user will have a private folder.
"Gilgamesh" <gilgamesh4ever@.aol.com> wrote in message
news:ONYLrGK0HHA.5644@.TK2MSFTNGP05.phx.gbl...
> We need to implement SQL Server 2005 Report Builder using our own security
> model. We use application level authentication, in which a user ID and
> password is verified against a record in the sql server database. So, we
> don't use Windows Authentication. The problem is that we need to implement
> the reporting builder as our ad-hoc reporting tool, but we need each user
> to have his own private folder on the server. I've found only four
> articles on http://msdn2.microsoft.com which talks about custom security
> extension, but none of those is even close to what I'm looking for. I'm
> sure that there're folks out there who've done this before.
> Any suggestion or lead will be greatly appreciated.
> Thanks,
> Gilgamesh
>|||Yes, I have. The problem is that My Reports works only if you use Windows
Autehtication. As I explained in the posting, we use database authetication.
-G
"Jeje" <willgart@.hotmail.com> wrote in message
news:Oz1e7LM0HHA.1164@.TK2MSFTNGP02.phx.gbl...
> have you activated the "My Reports" option in reporting services?
> this create a /My Reports folder and each user will have a private folder.
>
> "Gilgamesh" <gilgamesh4ever@.aol.com> wrote in message
> news:ONYLrGK0HHA.5644@.TK2MSFTNGP05.phx.gbl...
>> We need to implement SQL Server 2005 Report Builder using our own
>> security model. We use application level authentication, in which a user
>> ID and password is verified against a record in the sql server database.
>> So, we don't use Windows Authentication. The problem is that we need to
>> implement the reporting builder as our ad-hoc reporting tool, but we need
>> each user to have his own private folder on the server. I've found only
>> four articles on http://msdn2.microsoft.com which talks about custom
>> security extension, but none of those is even close to what I'm looking
>> for. I'm sure that there're folks out there who've done this before.
>> Any suggestion or lead will be greatly appreciated.
>> Thanks,
>> Gilgamesh
>>|||Have you implemented custom security in Reporting Services? I don't use
Report Builder but in the end you end up with a RDL just like if it had been
designed in Report Designer.
So, my question is, do you have your custom security implemented in any way
with RS? That is the first thing you will need to do.
http://msdn2.microsoft.com/en-us/library/ms152825.aspx
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Gilgamesh" <gilgamesh4ever@.aol.com> wrote in message
news:ercOBrW0HHA.4236@.TK2MSFTNGP06.phx.gbl...
> Yes, I have. The problem is that My Reports works only if you use Windows
> Autehtication. As I explained in the posting, we use database
> authetication.
> -G
> "Jeje" <willgart@.hotmail.com> wrote in message
> news:Oz1e7LM0HHA.1164@.TK2MSFTNGP02.phx.gbl...
>> have you activated the "My Reports" option in reporting services?
>> this create a /My Reports folder and each user will have a private
>> folder.
>>
>> "Gilgamesh" <gilgamesh4ever@.aol.com> wrote in message
>> news:ONYLrGK0HHA.5644@.TK2MSFTNGP05.phx.gbl...
>> We need to implement SQL Server 2005 Report Builder using our own
>> security model. We use application level authentication, in which a user
>> ID and password is verified against a record in the sql server database.
>> So, we don't use Windows Authentication. The problem is that we need to
>> implement the reporting builder as our ad-hoc reporting tool, but we
>> need each user to have his own private folder on the server. I've found
>> only four articles on http://msdn2.microsoft.com which talks about
>> custom security extension, but none of those is even close to what I'm
>> looking for. I'm sure that there're folks out there who've done this
>> before.
>> Any suggestion or lead will be greatly appreciated.
>> Thanks,
>> Gilgamesh
>>
>|||Bruce
ok, i need to do the same thing. But i am having some trouble with
configuring the secruity extension (Forms Authenication). i have an
question on the User Accounts database part.
The instructions say to replace the "LocalMachine" towards the end of
the createuserstore.sql. But i don't see any mention of that in the
script at all. Any ideas?
INSTRUCTIONS:
Locate "LocalMachine" towards the end of the script and replace it
with your own computer name. For Windows 2003 users, replace
LocalMachine\ASPNET with NT AUTHORITY\NETWORK SERVICE (except when in
IIS 5 compatibility mode).
createuserstore SCRIPT:
exec ('sp_grantlogin [' + @.ASPUserName + ']');
-- Add a database login for the UserAccounts database for the ASPNET
account
exec ('sp_grantdbaccess [' + @.ASPUserName + ']');
-- Grant execute permissions to the LookupUser and RegisterUser stored
procs
exec ('grant execute on LookupUser to [' + @.ASPUserName + ']');
exec ('grant execute on RegisterUser to [' + @.ASPUserName + ']');
------
Have you implemented custom security in Reporting Services? I don't
use
Report Builder but in the end you end up with a RDL just like if it
had been
designed in Report Designer.
So, my question is, do you have your custom security implemented in
any way
with RS? That is the first thing you will need to do.
http://msdn2.microsoft.com/en-us/library/ms152825.aspx
On Jul 29, 3:15 pm, "Bruce L-C [MVP]" <bruce_lcNOS...@.hotmail.com>
wrote:
> Have you implemented custom security in Reporting Services? I don't use
> Report Builder but in the end you end up with a RDL just like if it had been
> designed in Report Designer.
> So, my question is, do you have your custom security implemented in any way
> with RS? That is the first thing you will need to do.http://msdn2.microsoft.com/en-us/library/ms152825.aspx
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
> "Gilgamesh" <gilgamesh4e...@.aol.com> wrote in message
> news:ercOBrW0HHA.4236@.TK2MSFTNGP06.phx.gbl...
>
> > Yes, I have. The problem is that My Reports works only if you use Windows
> > Autehtication. As I explained in the posting, we use database
> > authetication.
> > -G
> > "Jeje" <willg...@.hotmail.com> wrote in message
> >news:Oz1e7LM0HHA.1164@.TK2MSFTNGP02.phx.gbl...
> >> have you activated the "My Reports" option in reporting services?
> >> this create a /My Reports folder and each user will have a private
> >> folder.
> >> "Gilgamesh" <gilgamesh4e...@.aol.com> wrote in message
> >>news:ONYLrGK0HHA.5644@.TK2MSFTNGP05.phx.gbl...
> >> We need to implement SQL Server 2005 Report Builder using our own
> >> security model. We use application level authentication, in which a user
> >> ID and password is verified against a record in the sql server database.
> >> So, we don't use Windows Authentication. The problem is that we need to
> >> implement the reporting builder as our ad-hoc reporting tool, but we
> >> need each user to have his own private folder on the server. I've found
> >> only four articles onhttp://msdn2.microsoft.comwhich talks about
> >> custom security extension, but none of those is even close to what I'm
> >> looking for. I'm sure that there're folks out there who've done this
> >> before.
> >> Any suggestion or lead will be greatly appreciated.
> >> Thanks,
> >> Gilgamesh- Hide quoted text -
> - Show quoted text -|||Sorry, I have not implemented this. I suggest a separate post specifically
about that. Also, you might want to post it at the web based forums as well.
http://forums.microsoft.com/msdn/showforum.aspx?forumid=82&siteid=1
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Ryan Swann" <swannryan@.gmail.com> wrote in message
news:1185807504.059515.124770@.57g2000hsv.googlegroups.com...
> Bruce
> ok, i need to do the same thing. But i am having some trouble with
> configuring the secruity extension (Forms Authenication). i have an
> question on the User Accounts database part.
> The instructions say to replace the "LocalMachine" towards the end of
> the createuserstore.sql. But i don't see any mention of that in the
> script at all. Any ideas?
>
> INSTRUCTIONS:
> Locate "LocalMachine" towards the end of the script and replace it
> with your own computer name. For Windows 2003 users, replace
> LocalMachine\ASPNET with NT AUTHORITY\NETWORK SERVICE (except when in
> IIS 5 compatibility mode).
> createuserstore SCRIPT:
>
> exec ('sp_grantlogin [' + @.ASPUserName + ']');
> -- Add a database login for the UserAccounts database for the ASPNET
> account
> exec ('sp_grantdbaccess [' + @.ASPUserName + ']');
> -- Grant execute permissions to the LookupUser and RegisterUser stored
> procs
> exec ('grant execute on LookupUser to [' + @.ASPUserName + ']');
> exec ('grant execute on RegisterUser to [' + @.ASPUserName + ']');
> ------
> Have you implemented custom security in Reporting Services? I don't
> use
> Report Builder but in the end you end up with a RDL just like if it
> had been
> designed in Report Designer.
> So, my question is, do you have your custom security implemented in
> any way
> with RS? That is the first thing you will need to do.
> http://msdn2.microsoft.com/en-us/library/ms152825.aspx
>
>
>
>
> On Jul 29, 3:15 pm, "Bruce L-C [MVP]" <bruce_lcNOS...@.hotmail.com>
> wrote:
>> Have you implemented custom security in Reporting Services? I don't use
>> Report Builder but in the end you end up with a RDL just like if it had
>> been
>> designed in Report Designer.
>> So, my question is, do you have your custom security implemented in any
>> way
>> with RS? That is the first thing you will need to
>> do.http://msdn2.microsoft.com/en-us/library/ms152825.aspx
>> --
>> Bruce Loehle-Conger
>> MVP SQL Server Reporting Services
>> "Gilgamesh" <gilgamesh4e...@.aol.com> wrote in message
>> news:ercOBrW0HHA.4236@.TK2MSFTNGP06.phx.gbl...
>>
>> > Yes, I have. The problem is that My Reports works only if you use
>> > Windows
>> > Autehtication. As I explained in the posting, we use database
>> > authetication.
>> > -G
>> > "Jeje" <willg...@.hotmail.com> wrote in message
>> >news:Oz1e7LM0HHA.1164@.TK2MSFTNGP02.phx.gbl...
>> >> have you activated the "My Reports" option in reporting services?
>> >> this create a /My Reports folder and each user will have a private
>> >> folder.
>> >> "Gilgamesh" <gilgamesh4e...@.aol.com> wrote in message
>> >>news:ONYLrGK0HHA.5644@.TK2MSFTNGP05.phx.gbl...
>> >> We need to implement SQL Server 2005 Report Builder using our own
>> >> security model. We use application level authentication, in which a
>> >> user
>> >> ID and password is verified against a record in the sql server
>> >> database.
>> >> So, we don't use Windows Authentication. The problem is that we need
>> >> to
>> >> implement the reporting builder as our ad-hoc reporting tool, but we
>> >> need each user to have his own private folder on the server. I've
>> >> found
>> >> only four articles onhttp://msdn2.microsoft.comwhich talks about
>> >> custom security extension, but none of those is even close to what
>> >> I'm
>> >> looking for. I'm sure that there're folks out there who've done this
>> >> before.
>> >> Any suggestion or lead will be greatly appreciated.
>> >> Thanks,
>> >> Gilgamesh- Hide quoted text -
>> - Show quoted text -
>|||I got evreything working, let me know if someone needs some help with it
"Bruce L-C [MVP]" wrote:
> Sorry, I have not implemented this. I suggest a separate post specifically
> about that. Also, you might want to post it at the web based forums as well.
> http://forums.microsoft.com/msdn/showforum.aspx?forumid=82&siteid=1
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
> "Ryan Swann" <swannryan@.gmail.com> wrote in message
> news:1185807504.059515.124770@.57g2000hsv.googlegroups.com...
> > Bruce
> >
> > ok, i need to do the same thing. But i am having some trouble with
> > configuring the secruity extension (Forms Authenication). i have an
> > question on the User Accounts database part.
> >
> > The instructions say to replace the "LocalMachine" towards the end of
> > the createuserstore.sql. But i don't see any mention of that in the
> > script at all. Any ideas?
> >
> >
> > INSTRUCTIONS:
> >
> > Locate "LocalMachine" towards the end of the script and replace it
> > with your own computer name. For Windows 2003 users, replace
> > LocalMachine\ASPNET with NT AUTHORITY\NETWORK SERVICE (except when in
> > IIS 5 compatibility mode).
> >
> > createuserstore SCRIPT:
> >
> >
> > exec ('sp_grantlogin [' + @.ASPUserName + ']');
> >
> > -- Add a database login for the UserAccounts database for the ASPNET
> > account
> > exec ('sp_grantdbaccess [' + @.ASPUserName + ']');
> >
> > -- Grant execute permissions to the LookupUser and RegisterUser stored
> > procs
> > exec ('grant execute on LookupUser to [' + @.ASPUserName + ']');
> > exec ('grant execute on RegisterUser to [' + @.ASPUserName + ']');
> >
> > ------
> > Have you implemented custom security in Reporting Services? I don't
> > use
> > Report Builder but in the end you end up with a RDL just like if it
> > had been
> > designed in Report Designer.
> >
> > So, my question is, do you have your custom security implemented in
> > any way
> > with RS? That is the first thing you will need to do.
> > http://msdn2.microsoft.com/en-us/library/ms152825.aspx
> >
> >
> >
> >
> >
> >
> >
> >
> > On Jul 29, 3:15 pm, "Bruce L-C [MVP]" <bruce_lcNOS...@.hotmail.com>
> > wrote:
> >> Have you implemented custom security in Reporting Services? I don't use
> >> Report Builder but in the end you end up with a RDL just like if it had
> >> been
> >> designed in Report Designer.
> >>
> >> So, my question is, do you have your custom security implemented in any
> >> way
> >> with RS? That is the first thing you will need to
> >> do.http://msdn2.microsoft.com/en-us/library/ms152825.aspx
> >>
> >> --
> >> Bruce Loehle-Conger
> >> MVP SQL Server Reporting Services
> >>
> >> "Gilgamesh" <gilgamesh4e...@.aol.com> wrote in message
> >>
> >> news:ercOBrW0HHA.4236@.TK2MSFTNGP06.phx.gbl...
> >>
> >>
> >>
> >> > Yes, I have. The problem is that My Reports works only if you use
> >> > Windows
> >> > Autehtication. As I explained in the posting, we use database
> >> > authetication.
> >> > -G
> >>
> >> > "Jeje" <willg...@.hotmail.com> wrote in message
> >> >news:Oz1e7LM0HHA.1164@.TK2MSFTNGP02.phx.gbl...
> >> >> have you activated the "My Reports" option in reporting services?
> >> >> this create a /My Reports folder and each user will have a private
> >> >> folder.
> >>
> >> >> "Gilgamesh" <gilgamesh4e...@.aol.com> wrote in message
> >> >>news:ONYLrGK0HHA.5644@.TK2MSFTNGP05.phx.gbl...
> >> >> We need to implement SQL Server 2005 Report Builder using our own
> >> >> security model. We use application level authentication, in which a
> >> >> user
> >> >> ID and password is verified against a record in the sql server
> >> >> database.
> >> >> So, we don't use Windows Authentication. The problem is that we need
> >> >> to
> >> >> implement the reporting builder as our ad-hoc reporting tool, but we
> >> >> need each user to have his own private folder on the server. I've
> >> >> found
> >> >> only four articles onhttp://msdn2.microsoft.comwhich talks about
> >> >> custom security extension, but none of those is even close to what
> >> >> I'm
> >> >> looking for. I'm sure that there're folks out there who've done this
> >> >> before.
> >>
> >> >> Any suggestion or lead will be greatly appreciated.
> >>
> >> >> Thanks,
> >> >> Gilgamesh- Hide quoted text -
> >>
> >> - Show quoted text -
> >
> >
>
>

No comments:

Post a Comment