Row Level Security -- sql server reporting services

sql server reporting services : Row Level Security

shlomoid NO[at]SPAM gmail.com
2/13/2005 5:20:06 AM

Hello,

I want to implement row level security using sql server reporting
services.
I noticed another post asking the same question and the same subject
line, but it recieved no proper answer.

My situation is the same as his - I need to seperate data according to
the client user name, from the same table.
The internet system i am building, will need to handle many users,
which can't see each other's records, but their data is stored at the
same table.

Here is a link to the other post on the same subject, i find it not
relevant to post the same thing twice.
http://groups-beta.google.com/group/microsoft.public.sqlserver.reportingsvcs/messages/110300aa490910ed,de31f976623b6c89,3c78bd588c6aba03,f67dcd82d3646a3a,4761bb89bab82df9,448882c85246ac99?thread_id=f623781fb429616f&mode=thread&noheader=1&q=row+security#doc_110300aa490910ed

Thanks in advance,
Shlomo

Wayne Snyder
2/14/2005 8:46:11 AM

Can you use User!UserID.Value as a join key instead of Suser_Sname() as you
might do in T-SQL

I haven't test User! so I do not know whose id it is but I beleive it is
intended to be the report requestor (when using trusted security)

--
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)

I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org

[quoted text, click to view]

shlomoid NO[at]SPAM gmail.com
2/15/2005 1:26:47 PM

Thanks alot for the answer, this really does seem like something that
will prove to be usefull.

I have but another extension to this question:
The reporting services server does not provide authentication, only
authorization (as the rs books online state).
That means, that i need to create a user on the machine, a real windows
user, for each internet user i want to recieve some sort of
authorization.
This is of course a source of many problems, such as kinds of security
issues.
What is the common practice in this scenario?
How can i implement my own authentication mechanizm? And should I?

Thanks again,
Shlomo

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about sql server reporting services

home · blog · groups

Questions? Comments? Contact the dn