| Author |
 Topic  |
|
|
EricBao
China
2 Posts |
 Posted - 03/12/2008 : 20:50:31
|
Does ReportPortal support the authorization configuration like this: Country users can view three regions sales (North, East and South), while region users can only view their own region's sales.
My understanding is that the Amin functions in your demo version can only configure the modules for different roles.
Looking foreward to your reply! |
|
|
admin
1645 Posts |
Posted - 03/12/2008 : 20:52:33
|
Eric,
Yes, ReportPortal supports this functionality in three ways. In each case you would have to create a role (Admin > Roles) that would represent each sales region.
1) Using a hidden user filter value.
- Go to Admin > User Filter Value. Select hierarchy that represents you sales region. Check "Apply to all reports and hide filter"
- Go To Admin > Roles > User Filter Value tab. Select the member that your sales region.
2) Using Analysis Services Security.
- Using Analysis Services Manages (SSAS 2000) or SQL Server Management Studio (SSAS 2005) create a role for each sales region.
- Select dimension that represents the sales region and select the appropriate member for that sales region.
- Create Windows Users (if needed) and add one windows user to each SSAS role.
Here are online movies that show how to setup security:
SSAS 2000: http://www.reportportal.com/Flash/As2000security.html
SSAS 2005: http://www.reportportal.com/Flash/As2005security.html
- Go to Admin > Settings > OLAP Report. Check the "XML for Analysis Security Enabled" option and click Update.
- Using IIS console change XMLA Virtual directory to use basic authentication only.
- Set security for a group of users go to Admin > Roles. Enter NT user id and password and click Update. Each windows user should correspond to user added to SSAS role.
3) Using different connection for each user role.
This method is similar to #2 in that it requires SSAS security configuration.
- Setup different XMLA virtual directories for each sales region. Each virtual directory should be pointing to the same XMLA physical folder.
- Using IIS console change the anonymous user for each XMLA Virtual directory. Each windows user should correspond to user added to SSAS role.
- Setup Connection for each virtual directory. (Admin > Connections).
- Go To Admin > Roles > Connections and change the new connection to the appropriate connection for that role. |
 |
|
|
EricBao
China
2 Posts |
Posted - 03/12/2008 : 20:55:45
|
Two more questions:
1. For the first way you introduced, if I have to hide the user filter value, some analysis will not be achieved. For example, for a certain user, I want him to see Drink product and all detailed products under Drink group: Alcoholic Beverages, Beverages and Dairy. After I set a role for Drink and all members under Drink, then the report has hidden the Product dimension, I have no way to see By detail product under Drink sales.So for such analysis needs, I can only use the second way with SSAS to do it, right?
2. Even using the second way with SASS, If I place the Product(Drink) in the Filter area, then the reports only get the relevant figures for Drink. But If some users dragged the Product dimensions out, then such filters won't work any more and will report all products instead of only Drink products. So my understanding is if you can't fix Product(Drink) in that filters area, then such security won't work in real cases.
Looking forward to your advice.
|
|
|
|
admin
1645 Posts |
Posted - 03/12/2008 : 20:57:04
|
1. You are correct in that once you have hidden a hierarchy you can no longer use it for filtering. However, you can place the child levels in a separate hierarchy that can be used for filtering. There is an application option that lets your hidden filter effect all other filters. Admin > Settings > OLAP > Filters depend on one another. The same option is available on the report level (Options dialog > Non Empty tab).
2. (also 3) No, the Drink member will affect the data the user will see even if the Product dimension is not chosen for the filter. This is because the Drink member will became the “default member” for the dimension. |
|
|
| |
Topic |
|
|
|
Report Portal
User Content Customization
