Author Topic: Security Question  (Read 242 times)

Offline HDA

  • Full Member
  • ***
  • Join Date: Sep 2013
  • Posts: 44
  • Forum Citizenship: +0/-0
Security Question
« on: 12 Mar 2018 04:03:24 pm »
I want to hide the capability of adding SQL queries in Report Studio to certain authors. But i want them to be able to run the reports with SQL queries. These authors I am talking about have access to report studio. I just don't want them to be able to add SQL queries. How do I do that ?

TIA.

Offline aussieadam

  • Full Member
  • ***
  • Join Date: Mar 2017
  • Posts: 28
  • Forum Citizenship: +2/-0
Re: Security Question
« Reply #1 on: 13 Mar 2018 08:44:52 am »
you can deny the capability to that role.

There is a run report option in properties > advanced > run with owner capabilities.

If the owner of the report has a role with capabilities for nativeSQL, any user with permissions on the report should be able to run the report.

Offline HDA

  • Full Member
  • ***
  • Join Date: Sep 2013
  • Posts: 44
  • Forum Citizenship: +0/-0
Re: Security Question
« Reply #2 on: 16 Mar 2018 09:43:35 am »
The user has access to report studio. So he can open the report in report studio and modify it. I don't want this user to write any sql queries inside report studio.
Is there a way to disable SQL query option from the tools menu for this user ?

Offline aussieadam

  • Full Member
  • ***
  • Join Date: Mar 2017
  • Posts: 28
  • Forum Citizenship: +2/-0
Re: Security Question
« Reply #3 on: 16 Mar 2018 09:53:37 am »
I know you could in v11, probably somewhat possible in v10 just wouldn't know how.

However, the issue with that is they could always copy and paste an existing nativeSQL query and modify that sql. If they have access to do that once they could just save it in their personal folder as something else. After that they would have free range to make any nativeSQL report they wanted.

 


       
Twittear