| |
| |
STEPS TO REPRODUCEIn the customer's environment, VFC (US Shale), using domain logins to access SSRS Reports Server. In the RP RS Server form, sync security is selected. VA Data security is set to lock down HQCo, with Security group 10000 as default. Other groups, 10001 for company 1 and 10201 for company 201. User "vptest" is part of 10001 only. Adding a reports work center for vptest, the company selection does observe that this user only has access to company 1. Adding an SSRS report for say jobs or contracts, vptest can see all companies in the company drop down and can see all contracts for this company. And vptest can see results for this report.
|
CURRENT RESULTSAdding a reports work center for vptest, the company selection does observe that this user only has access to company 1. Adding an SSRS report for say jobs or contracts, vptest can see all companies in the company drop down and can see all contracts for this company. And vptest can see results for this report.
|
EXPECTED RESULTSUser vptest should only see company 1 in the SSRS report drop down and all contracts or jobs which are only in company 1.
|
WORKAROUNDIt appears that when users are given access to the Viewpoint database out in the SSRS reports server, this circumvents any security settings back in Viewpoint, data security access. The sync security check box in RP RS Server should only control report access. In VA data security access, is this info written to the OLAP BI cube, where SSRS reports are looking? Should the OLAP cube be processed when significant data security settings are implemented.
|
|
|
|