Reporting but within rights

[Julius]

We have made few reports from projectserver_reporting database using Sql
Server Reporting Services. Reporting Services is used in integrated mode
and reports are started from PWA.

Reports are otherwise working just fine but the problem is that a user
can take reports even from projects he don't have rights. How could we
limit user to be able to report only projects he has rights.

Parameters to reports are varying and don't nessesary include project.

Julius

 

[Jonathan Sofer [MVP]]

You can get sophisticated with using the security tables in the Published
database to limit access to data in SRS.

This is not the complete query but you can start with this group
memebership. There might even ben some built in functions and stored
procedures in the Published database you can leverage.

Be aware that querying the published database is not supported by Microsoft.

SELECT MSP_WEB_SECURITY_GROUPS.WSEC_GRP_NAME, MSP_WEB_RESOURCES.RES_NAME
FROM MSP_WEB_SECURITY_GROUP_MEMBERS INNER JOIN
MSP_WEB_SECURITY_GROUPS ON
MSP_WEB_SECURITY_GROUP_MEMBERS.WSEC_GRP_GUID =
MSP_WEB_SECURITY_GROUPS.WSEC_GRP_GUID INNER JOIN
MSP_WEB_RESOURCES ON
MSP_WEB_SECURITY_GROUP_MEMBERS.WRES_GUID = MSP_WEB_RESOURCES.WRES_GUID
ORDER BY MSP_WEB_SECURITY_GROUPS.WSEC_GRP_NAME, MSP_WEB_RESOURCES.RES_NAME