SSRS 2008 Snapshotting Security
I am writing a report that will display data based on User!UserID
built in SSRS framework. The data is sensitive to the user department.
In addition to these department users, administrators will be added, which should be able to run for all departments or have a report option for a specific department.
Ideally, I would like to use SSRS snapshots so that users can rerun the report they ran on a previous date. It is important that the user can only view the snapshots he has taken for his department.
My questions are: 1.) Does SSRS create a snapshot mechanism to restrict the view of the snapshots by the user who created them? 2.) Will I need to write two reports, one for the administrator and one for the department users? I think I am doing this because there is no way to protect the report parameters.
Thanks!
a source to share
Good first question for you:
- Does SSRS create a snapshot mechanism to restrict the view of the snapshots by the user who created them?
For each tab "Snapshot" In the section "Security" we can define users / groups who can view reports. This will control what all users can see in the report, now it has no control over "What data your report shows". I think for this part we need to filter the data based on UserId and then show it in the report. Hence, it will ensure that the right people see the correct report and the correct data within it.
- I need to write two reports, one for the administrator and one for the department users?
Well, in theory it is only data that is different for a normal user and an admin user. Therefore, if, when filtering / fetching data, you can determine which one is an administrator and which one is a regular user, you can write an appropriate query to return the relevant data based on the role.
If you are unable to define the role of the user when filtering / extracting data, I think you should have two different reports.
a source to share