Hello,
I want to implement row level security using sql server reporting
services.
I noticed another post asking the same question and the same subject
line, but it recieved no proper answer.
My situation is the same as his - I need to seperate data according to
the client user name, from the same table.
The internet system i am building, will need to handle many users,
which can't see each other's records, but their data is stored at the
same table.
Here is a link to the other post on the same subject, i find it not
relevant to post the same thing twice.
http://groups-beta.google.com/group/microsoft.public.sqlserver.reportingsvcs/messages/110300aa490910ed,de31f976623b6c89,3c78bd588c6aba03,f67dcd82d3646a3a,4761bb89bab82df9,448882c85246ac99?thread_id=f623781fb429616f&mode=thread&noheader=1&q=row+security#doc_110300aa490910ed
Thanks in advance,
ShlomoCan you use User!UserID.Value as a join key instead of Suser_Sname() as you
might do in T-SQL
I haven't test User! so I do not know whose id it is but I beleive it is
intended to be the report requestor (when using trusted security)
--
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
<shlomoid@.gmail.com> wrote in message
news:1108300806.467922.236190@.o13g2000cwo.googlegroups.com...
> Hello,
> I want to implement row level security using sql server reporting
> services.
> I noticed another post asking the same question and the same subject
> line, but it recieved no proper answer.
> My situation is the same as his - I need to seperate data according to
> the client user name, from the same table.
> The internet system i am building, will need to handle many users,
> which can't see each other's records, but their data is stored at the
> same table.
> Here is a link to the other post on the same subject, i find it not
> relevant to post the same thing twice.
> http://groups-beta.google.com/group/microsoft.public.sqlserver.reportingsvcs/messages/110300aa490910ed,de31f976623b6c89,3c78bd588c6aba03,f67dcd82d3646a3a,4761bb89bab82df9,448882c85246ac99?thread_id=f623781fb429616f&mode=thread&noheader=1&q=row+security#doc_110300aa490910ed
> Thanks in advance,
> Shlomo
>|||Thanks alot for the answer, this really does seem like something that
will prove to be usefull.
I have but another extension to this question:
The reporting services server does not provide authentication, only
authorization (as the rs books online state).
That means, that i need to create a user on the machine, a real windows
user, for each internet user i want to recieve some sort of
authorization.
This is of course a source of many problems, such as kinds of security
issues.
What is the common practice in this scenario?
How can i implement my own authentication mechanizm? And should I?
Thanks again,
Shlomo
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment