How to use Report Builder with permission extension

Question

Is there any method to let web site which use SSRS and Report Builder use different permission extension module?
In our web site project we use ReportingService2010 Methods to show and operate folder and report which stored in Report Service, in our project configuration file, we use windows authentication mode for Report Service.
In requirement 1.User can do any operation in folder “A” and folder “B” (we can create and delete report or folder) in web site. 2.User can’t use “Report Builder” to save reports which created by Report Builder to folder “B”, Reports which created by Report
Builder only can be saved in folder “A”. [User click “Report Builder” button in our web page to start Report Builder, use  “Report Builder” to create report, if user want to save report, we need to hidden folder “B” in “Report Builder” or we need to remove
some operate right from folder “B”.]
We have two solution:
1. We want to write extension module to process this issue, we want to re-write CheckAccess method which will be called by web site backend  and Report Builder, but how can we know who called CheckAccess method[Web site backend called CheckAccess method
or Report Builder?]
2. We want to let Web site back-end use permission extension module named WebSitePer.dll, and Report Builder use PBPer.dll, how to modify the configuration file?

Answer 1

Hi Fang,
As far as I know, SQL Server Reporting Services (SSRS), have no permission extension. In Reporting Services, it is use role-based security to grant user access to a report server. There are two types of roles: Item-level roles and System-level roles.
Based on my test, if we assign user with System User System-level role, the user will have permission to user Report Builder to create report. However, if we only assigned Browser or Report Builder Item-level role to the user, he/she will have no permission
to publish the report to the report server. In this situation, although user have permission user Report Builder to edit the report, it will have no effect of the report in report server. User who has assigned Browser or Report Builder Item-level role will
have no permission to delete report in the report server.
There is an article about Setting Permissions in Reporting Services, you can refer to it.
http://technet.microsoft.com/en-us/library/aa337491(v=sql.105).aspx
Hope this helps.
Regards,
Alisa Tang
Alisa Tang
TechNet Community Support