SSRS Report Security

Hi,
I want to control who can view my SSRS reports based on following things?
Company of the Person
Designation of the Person
Department of the Person
Rank of the Person
How do I achieve that? Can somebody provide me step by step instructions or point me to right direction.
Thank You,
kalpesh

do you have all that information readily available in a database?
- Yes I do .
Is everyone who meets your criteria going to have access to the same set of reports, or is each user going
to have a specific subset of reports based on their credentials?
- based on their company , designation, department, rank etc user will have access to different sets
You may have to write a stored procedure or a function that gets called in every report to verify credentials.
- This will not work as I do not even want to display available reports if user does not fit criteria.
How many users/companies etc. are going to be accessing your SSRS site?
- 150 users and 20 companies.

Similar Messages

SSRS report security by expiring its session

Hello all,
We are using SSRS 2008 r2 for Reporting as its financial services company so, too much scope for reporting .
Here, i am facing some problems let to security when users opens report and forget to close anymore report still stay opens for a hours i get suggest that to expired session for report after 10 minutes . How to achieve this please help.
also , instead of login to application users are opening report from browser history .
Dilip Patil..

Hi Dilip,
According to your description, you have reports which can be accessed by a lot users. Now you want to expire the session 10 minutes after the user has no operation on the page. Right?
In this scenario, we can embed javascript code in the report page. Keep the page monitoring the event on page. If there's no mouse click/move, key press event for 10 minute, it will redirect/close the page. Please go to the Report.aspx file, it locates at
C:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportManager\Pages. Embed the code below:
<script type="text/javascript">
var load_time = null;
var down_time = null;
function window.onload(){
flag = false;
load_time = setTimeout(function(){
location.href("http://server name/Reports/Pages/Folder.aspx");
},600000);
function clear(){
clearInterval(load_time);
if(null != down_time){
clearInterval(down_time);
down_time = setTimeout(function(){
location.href("http://server name/Reports/Pages/Folder.aspx");
},600000);
function document.onmousemove(){
clear();
function document.onmousedown(){
clear();
function document.onkeypress(){
clear();
</script>
Then the report will redirect to the Report Manager page if it's timeout.
If you have any question, please feel free to ask.
Best Regards,
Simon Hou

Sharepoint and SSRS report trust relationship ssl/tls secure channel remote certificate is invalid

I have no experience with sharepoint at all. but this is what I observed.
I intermittently getting this error message on my sharepoint. could not establish trust relationship for the ssl/tls secure channel. Remote Certificate is invalid according to the validation procedure.
Screnshot of the error
This is how the sharepoint page layout.
I have report.aspx. and below is the content of the aspx file.
The url is http://sharepoint.COMPANY.com/Pages/Report.aspx.
The URL is intranet only.
The sharepoint is hosted in SERVER1 and the SSRS is hosted in SERVER.
I observed this error happens on both HTTP and HTTPS http sharepoint COMPANY com/Pages/Report.aspx OR https sharepoint COMPANY com/Pages/Report.aspx
So far, the step I did was to follow this blog http://krishnasangani.blogspot.ca/2013/06/the-remote-certificate-is-invalid.html Restarted
IIS in SERVER1 AND SERVER2. but the problem persist. Another I have done is to click the certificate in internet explorer and everything looks ok on that side to (certificate is valid)
It seems to only happen earlier during the morning, then it fixes itself around 9 Oclock. It has been on going for about 2 weeks. Please help troubleshooting this.
<%@ Page Inherits="Microsoft.SharePoint.Publishing.TemplateRedirectionPage,Microsoft.SharePoint.Publishing,Version=14.0.0.0,Culture=neutral,PublicKeyToken=71e9bsasdasdasd9c" %> <%@ Reference VirtualPath="~TemplatePageUrl" %> <%@ Reference VirtualPath="~masterurl/custom.master" %><%@ Register Tagprefix="SharePoint" Namespace="Microsoft.SharePoint.WebControls" Assembly="Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bsasdasdasd9c" %>
<html xmlns:mso="urn:schemas-microsoft-com:office:office" xmlns:msdt="uuid:547SF010-65B3-11d1-A29F-00457845FFSW"><head>

<title>Report</title></head>
A few questions I have in mind is Any pointer to troubleshoot this problem AND By looking at the ASPX file, Would you be able to determine what method is my Sharepoint page calling the SSRS report , integrated mode, native mode? IEFrame? The reason I am asking
this is that maybe IF I google using the right terminology I can get to the similar problem and solution.
Thanks

Please let us know if you are using
SharePoint communicates to an external service via HTTPS
Please try perform following steps:
Fix is to setup a trust between SharePoint and the server requiring certificate validation.
In SharePoint Central Administration site, go to “Security” and then “Manage Trust”. Upload the certificates to SharePoint. The key is to get both the root and subordinate certificates on to SharePoint.
The steps to get the certificates from the remote server hosting the WCF service are as follows:
1. Browse from IE to the WCF service (e.g., https://remotehost/service.svc?wsdl)
2. Right click on the browser body and choose “Properties” and then “Certificates” and then “Certificate Path”.
This tells you the certificate chain that’s required by the other server in order to communicate with it properly. You can double-click on each level in the certificate chain to go to that particular certificate, then click on “Details” tab, “Copy to
File” to save the certificate with the default settings.
As an example, get both VeriSign & VeriSign Class 3 Extended Validation SSL CA.
reference : http://blogs.technet.com/b/sharepointdevelopersupport/archive/2013/06/13/could-not-establish-trust-relationship-for-ssl-tls-secure-channel.aspx
If my contribution helps you, please click Mark As Answer on that post and
Vote as Helpful
Thanks, ShankarSingh(MCP)

Project Server User Security + Custom SSRS Reports Project List Parameter

Hello, below is the issue / challenge scenario:
I'mnt. We have to remove the smaller chunk of queries that are hitting the published database to get the user security permissions. I'm using custom SSRS reports that are pulling data from Reporting database and other custom financial SQL DB's. I need to
figure out a solution to get the list of accessible projects for a particluar user using PSI. I did find this technet article that addresses my issue in a way
http : // technet . microsoft . com/en-us/office/ee862408(v=office.14).aspx#pj2007_ta_SecurityInReports_DevelopingThePsiProxiesClassLibrary
the above solution means that I need to change many of my existing report queries (going to published DB)
Is there a simpler way to maintain a table that I can populate with the Project GUID's, name , user id, name using PSI? I can then refer the existing SQL's procs, TVF's to point to this table instaed of going to the published DB (unsupported method)
Any help/ direction is greatly appreciated
thanks,
SG

Hello,
The ReadProjectStatus PSI method defaults to Project for the Project Type, the value is 0. If you want other project types is gets slightly more complicated as you have to have multiple data sets for the ReadProjectStatus call, one for each project type
- each time specifying the default projType. For example for Projects (0) the query is:
<Query>
<Method Namespace="http://schemas.microsoft.com/office/project/server/webservices/Project/" Name="ReadProjectStatus">
<Parameters>
<Parameter Name="projType"><DefaultValue>0</DefaultValue></Parameter>
</Parameters>
</Method>
<SoapAction>http://schemas.microsoft.com/office/project/server/webservices/Project/ReadProjectStatus</SoapAction>
<ElementPath IgnoreNamespaces="true">ReadProjectStatusResponse/ReadProjectStatusResult/diffgram/ProjectDataSet/Project{PROJ_NAME,PROJ_UID,PROJ_TYPE}</ElementPath>
</Query>
For sub projects (5) it is:
<Query>
<Method Namespace="http://schemas.microsoft.com/office/project/server/webservices/Project/" Name="ReadProjectStatus">
<Parameters>
<Parameter Name="projType"><DefaultValue>5</DefaultValue></Parameter>
</Parameters>
</Method>
<SoapAction>http://schemas.microsoft.com/office/project/server/webservices/Project/ReadProjectStatus</SoapAction>
<ElementPath IgnoreNamespaces="true">ReadProjectStatusResponse/ReadProjectStatusResult/diffgram/ProjectDataSet/Project{PROJ_NAME,PROJ_UID,PROJ_TYPE}</ElementPath>
</Query>
You have to repeat this for all project types you want to include, create a hidden parameter for each project type then create a parameter to join them up and use the combined parameter to filter the data sets that get the data from the Reporting
database.
For other parameters in the ReadProjectStatus method see:
http://msdn.microsoft.com/en-us/library/gg210536(v=office.15).aspx
Paul
Paul Mather | Twitter |
http://pwmather.wordpress.com | CPS

Ssrs report web service to save report as pdf throws error Soap exception unhandeled by user code

I am creating a C# web application to save an SSRS report as a pdf file on my local machine.
I added the ReportService web reference as RS2005 and ReportExecution2005 web reference as RE2005.
http://myServer/ReportServer_DEVPROJECT/ReportExecution2005.asmx?WSDL
http://myServer/ReportServer_DEVPROJECT/ReportService2005.asmx?WSDL
I created the following function SaveReport that is called on button click. My report can be accessed on the report server with the following url:
http://myServer/Reports_DEVPROJECT/Pages/Report.aspx?ItemPath=%2fData+Mgmt%2fSample+Letter
On the Report Manager home page the report link appears as "SAMPLE LETTER".
It is deployed in the DataMgmt folder on the Report Manager.
It uses a data source called "DS Letter" with option "Credentials stored securely in the report server"
My application gets compiled, but I get the following run time error:
Error: Soap exception unhandeled by user code. The item '/DataMgmt/Sample Letter' cannot be found. ---> Microsoft.ReportingService
s.Diagnostics.Utilities.ItemNotFoundException: The item '/DataMgmt/Sample Letter' cannot be found.
Please check my code and let me know what I can do to run this successfully. Once this is done, I would like to get help with passing a parameter (memberID) to the generate report for that member, through this application.
Thank You in advance for your help.
public static void SaveReport()
RS2005.ReportingService2005 rs;
RE2005.ReportExecutionService rsExec;
// Create a new proxy to the web service
rs = new RS2005.ReportingService2005();
rsExec = new RE2005.ReportExecutionService();
// Authenticate to the Web service using Windows credentials
rs.Credentials = System.Net.CredentialCache.DefaultCredentials;
rsExec.Credentials = System.Net.CredentialCache.DefaultCredentials;
rs.Url = "http://myServer/ReportServer_DEVPROJECT/ReportService2005.asmx";
rsExec.Url = "http://myServer/ReportServer_DEVPROJECT/ReportExecution2005.asmx";
string historyID = null;
string deviceInfo = null;
string format = "pdf";
Byte[] results;
string encoding = String.Empty;
string mimeType = String.Empty;
string extension = String.Empty;
RE2005.Warning[] warnings = null;
string[] streamIDs = null;
string fileName = @"c:\temp\samplerHAPeport.pdf";
string _reportName = @"/DataMgmt/Sample HAP Letter";
string _historyID = null;
bool _forRendering = false;
RS2005.ParameterValue[] _values = null;
RS2005.DataSourceCredentials[] _credentials = null;
RS2005.ReportParameter[] _parameters = null;
try
_parameters = rs.GetReportParameters(_reportName, _historyID, _forRendering, _values, _credentials);
RE2005.ExecutionInfo ei = rsExec.LoadReport(_reportName, historyID);
RE2005.ParameterValue[] parameters = new RE2005.ParameterValue[1];
if (_parameters.Length > 0)
//parameters[0] = new RE2005.ParameterValue();
//parameters[0].Label = "";
//parameters[0].Name = "";
//parameters[0].Value = "";
rsExec.SetExecutionParameters(parameters, "en-us");
results = rsExec.Render(format, deviceInfo,
out extension, out encoding,
out mimeType, out warnings, out streamIDs);
using (FileStream stream = File.OpenWrite(fileName))
stream.Write(results, 0, results.Length);
catch (Exception ex)
throw ex;
protected void BtnGenReport_Click(object sender, EventArgs e)
SaveReport();

Hello Devster,
Thank you to post your question on TechNet forum.
After reviewing the whole post, I have a question to you. You can access the report via the link, http://myServer/Reports_DEVPROJECT/Pages/Report.aspx?ItemPath=%2fData+Mgmt%2fSample+Letter.
From the URL, I can see that the report is located at: /Data Mgmt/Sample Letter, instead of /DataMgmt/Sample Letter. In addition, I found that the target report is "/DataMgmt/Sample HAP Letter" instead of "/DataMgmt/Sample Letter" as the error described. I
am not sure whether you post out the correct code segment.
Please check the above things on your side, and hope it is helpful to you.
Regards,
Edward
Edward Zhu
TechNet Community Support

Need help on self referencing a ssrs report

Hi All,
I have a graph on one of my report which shows data on level 1 by default and go on showing level 2 and level 3 data on successive clicks. This has been achieved by self referencing a ssrs report and passing respective parameters. Now to identify which level
data needs to be shown on graph, I have used one more parameter which default value is 1 and go on increasing to 2 then 3 on successive click and this parameter value is used in group expression of graph. This works just fine.
But the real problem has occurred when you go and select report parameters which are corresponding to level 1, level 2 and level 2 values and click on apply in between. For e.g. Assume level 1=Region, level 2=SubRegion and level 3=Country. When you run this
report it shows region wise data on graph and value of fourth parameter is 1, now when you click on graph it takes you to level 2 i.e. it shows sub region wise data on graph and value of fourth parameter is 2 but when you go and select all region, sub region
and countries from report parameters and click on apply button then it should show data on graph region wise but since the time you were selecting parameter data was sub region wise and value of fourth parameter was 2 it shows data for all sub regions which
is weird and not acceptable at all.
I am hoping SSRS should provide a way to pass parameters just like we pass in action on any control within ssrs report to solve this issue. Please help me out to solve this issue or let me know if need more infor.

Hi,
There was an error reading from the pipe: Unrecognized error 109 (0x6d).
One reason was inconsistent binding between client and server <netNamedPipeBinding> <security mode="None"></security>... (no
communication)
The other intermittent issue was time-out related.
For more information, you could refer to:
http://stackoverflow.com/questions/15836199/wcf-namedpipe-communicationexception-the-pipe-has-been-ended-109-0x6d
http://stackoverflow.com/questions/22334514/wcf-named-pipe-error-the-pipe-has-been-ended-109-0x6d
Regards

SSRS report throwing error :- system.web.aspnethostingpermission failed

Hi,
I am facing an issue with SSRS report after implementing HTTPHandler in its web.config file of Report manager.
My reports were working fine. I deployed a dll in report manager BIN folder and added below tag in the web.config
<add verb="*" path="*.aspx" type="ISHandler.SyncHandler, ISHandler" />
ISHandler is the assembly/namespace and SyncHandler is the class name.
I am getting error when I try to access the report
error :- system.web.aspnethostingpermission failed.
Currently web.config contains below settings.
<securityPolicy>
<trustLevel name="RosettaMgr" policyFile="rsmgrpolicy.config" />
</securityPolicy>
<trust level="RosettaMgr" originUrl="" />
Can you please help where the security permission is missing ?
sanmay

I am unable to see that. Please check.
sanmay

Javascript Problem for Drill Down Action in SSRS Report when integrated to PPS 2010

Hi all,
I have a SSRS report which is integrated to PPS 2010(Performance Point Services) and it is having a drill down action through Go to URL action(I wrote javascript:void(window.open('xxxxx')) to open drill down report in new window).
This report has 5 parameters and all are multiple valued. Drill down report is opening very well when I open the report form Report Manager for any number of parameters values selected. But when I integrate the same report is PPS and deployed to SharePoint
then it is working only for 23 parameter values selected in PPS filters. If I select more the 23 values in PPS filters then the drilldown report is not opening.
But it is working well in Chrome, I verified in IE and Mozilla, both browsers are having problem.
When I look at Error Console of Mozilla, it is showing a javascript error as "Error: uncaught exception: ReferenceError: window is not defined" but the same report is working well if I select less than 24 filter values.
Please provide me the solution
Thanks in advance

Hi Vasu,
The issue might occur due to the Microsoft security update MS11-100 which limits the maximum number of form keys, files, and JSON members to 1000 in an HTTP request. Here, I suggest that you modify the Web.config file of the SharePoint site as follows:
<appSettings>
<add key="aspnet:MaxHttpCollectionKeys" value="10000" />
</appSettings>
If the SharePoint site uses the port 80, the web.config file of the SharePoint site is located in the C:\inetpub\wwwroot\wss\VirtualDirectories\80 folder.
Reference:
An ASP.NET request that has lots of form keys, files, or JSON payload members fails with an exception
If the issue persist, please check whether there are any related errors in the Reporting Services log file which is located in <Drive>:\Program Files\Microsoft SQL Server\MSRSXX.<Instance Name>\Reporting Services\LogFiles.
Regards,
Mike Yin
TechNet Community Support

SSRS report viewer web part error only in IE not in Chrome & Safari

SSRS is setup in SP integrated mode.
I am getting this error when I click a report parameter drop down for the second time to display the list of avaliable values:
Sys.WebForms.PageRequestManagerParserErrorException: The message received from the server could not be parsed. Common causes for this error are when the response is modified by calls to Response.Write(), response
filters, HttpModules, or server trace is enabled. Details: Error parsing near '< !DOCTYPE html PUB'.
I researched this issue and have added the following to my SP site's web.config:
<appSettings>
<add key="aspnet: MaxHttpCollectionKeys" value="5000" />
</appSettings>
Oddly enough, I only get this error in IE not in Chrome it works fine... Any ideas on how to correct?
fyi- Drop down has <25 items I would say.

Hi,
According to your post, my understanding is that you had some issues about the SSRS.
As you had known, this issue is caused that Microsoft security update MS11-100 limits the maximum number of form keys, files, and JSON members to 1000 in an HTTP request.
Because of this change, ASP.NET applications reject requests that have more than 1000 of these elements.
HTTP clients that make these kinds of requests will be denied, and an error message will appear in the web browser.
SSRS report filtering column were sending as HTTPCollectionKeys and that was reaching the maximum limit.
The solution is adding the MaxHttpCollectionKeys as you had did, you can try add a larger number to check whether it works, such as 9999 as below.
<appSettings>

<add key="aspnet:MaxHttpCollectionKeys" value="9999" />
</appSettings>
http://blogs.msdn.com/b/paulking/archive/2012/01/16/using-an-http-module-to-assist-in-adjusting-the-value-of-aspnet-maxhttpcollectionkeys-imposed-by-ms11-100.aspx
As this issue is related to the SSRS, you can post the issue to the SSRS forum.
http://social.technet.microsoft.com/Forums/sqlserver/en-US/home?forum=sqlreportingservices
More experts will assist you, then you will get more information relation to SSRS.
Thank you for your understanding and support.
Thanks,
Jason
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Jason Guo
TechNet Community Support

Execute Permission Denied on Stored Procedure for SSRS Report

I have a report in SSRS 2008R2. The report is running against a 2005 instance. This report, encapsulated as a stored procedure, runs fine in BIDS. When I deploy it to the Report Manager I suddenly get"
The EXECUTE permission was denied on the object 'ticketStatus',database 'SomeDatabase', schema 'dbo'.
I have granted the execute permission to the sql login, I'll call it 'bob', being used in the datasource. I can run the stored procedure in SSMS as that sql login. That SQL login is also assigned the db_datareader and db_denydatawriter database
level roles in the database for the query. The query makes use of a linked server to another database. I have tested that I can run the query via the linked server using the SQL login. I created a separate SSRS report and simply used the
SELECT part of my stored proc. I upload that to the Report Manager and it works fine. I can't figure out why this report will not work when it is set up to use the Stored Proc. Any help sorting this out would be appreciated.

I have granted the execute permission to the sql login, I'll call it 'bob', being used in the datasource. I can run the stored procedure in SSMS as that sql login. That SQL login is also assigned the db_datareader and db_denydatawriter database
level roles in the database for the query. The query makes use of a linked server to another database. ...
You are saying you are using a linked server for a database that sits on the same server as the database where the Procedure resides? Is there any reason to do that instead of just using a 3-part name, possibly in combination with a synonym?
Linked servers have a different security concept also
Trustworthy should not be used then either as it can lead to privilege escalation/elevation attacks from inside that database
Cross Database Ownership chaining is yet another and different problem
The best woul be to have that Login as a user in both databases and have the necessary permissions like Execute on Schema/Database there. Deny should only be necvessary under the circumstances that the user is member of different groups/roles
Andreas Wolter
Microsoft Certified Master SQL Server 2008
Microsoft Certified Solutions Master SQL Data Platform, SQL Server 2012
Blog: www.insidesql.org/blogs/andreaswolter
Web: www.andreas-wolter.com |
www.SarpedonQualityLab.com

SSRS report mail subsription is failing.

Hi All,
I have one SSRS report which is deployed in my local report server. I need to activate email subscription for the same. I have given my outlook email address and SMTP server which is copied from outlook settings to Report configuration manager. Then I have
created a mail account and profile in sql server. I made the profile as public and default one. I have chosen basic authentication and provided my windows account and password for SMTP authentication. Port number is 25 which was given there as default.
SSL was not ticked. Then I have tried with the below sp.
EXEC msdb.dbo.sp_send_dbmail
@recipients='[email protected]'
,@subject='test'
,@body='test'
Everything worked fine. I have got the mail also. Then I tried to create a mail subscription for the deployed report on
my report server. I have scheduled it also. But I'm getting error message. Then searched in net and read somewhere that we are supposed to use windows authentication for SMTP. Then I changed the mail account to use windows authentication for SMTP. Even then
also I'm getting the same error given below.
Failure sending mail: The SMTP server requires a secure connection or the
client was not authenticated. The server response was: 5.7.1 Client was not
authenticatedMail will not be resent.
I have noticed another issue.
Because of the above error, I have chosen to use the secure connection (SSL) in the mail account. Also, SMTP authentication is Basic Authentication. I am not able to send email from database itself after checking the secure connection option. I
was able to send mail from database(by using the [proc dbo.sp_send_dbmail) when unchecking Secure connection option.
I'm getting the below error when running this query
SELECT
*FROMmsdb.dbo.sysmail_event_logorderbylog_datedesc
The mail could not be sent to the recipients because of the mail server failure. (Sending Mail using Account 6 (2015-04-22T17:45:22). Exception Message: Cannot send mails to mail server. (The remote certificate is invalid according to the validation procedure.).
Please suggest
Regards,
Julie

See if this helps
https://saravananarumugam.wordpress.com/2012/04/30/the-smtp-server-requires-a-secure-connection-or-the-client-was-not-authenticated-the-server-response-was-5-7-1-client-was-not-authenticated/
Also check SSRS config
https://msdn.microsoft.com/en-us/library/ms345234.aspx
If still it doesnt work see if you can turn on anonymous authentication in SMTP server
Please Mark This As Answer if it solved your issue
Please Vote This As Helpful if it helps to solve your issue
Visakh
My Wiki User Page
My MSDN Page
My Personal Blog
My Facebook Page

Project Server 2013 reporting security

HI
I have a question and I have seen a couple similar ones but nothing definitive on the topic of permissions/security for Project server 2013 (in project server security mode) for either Excel(Odata) reports or for SSRS reports.
Even setting security aside the Out of the box configuration is certainly not elegant or even usable.
Situation:
In PWA project managers and team members can only see projects they, own, are team members on, or have been granted permissions explicitly to. (Pretty standard - is using security templates and "my Projects"). We are using secure store
and impersonation for access to reports. We do have report authors groups.
As an example a PM needs to create a weekly status report but should not have to pull all the data back to then filter for their one project.
However, when a PM goes to either SSRS or Excel using oData they can see every project in the company. This is just does not make a lot of sense. Why would I hit the database for 100projects when I only care about one and yet there seems
to be a lack of information on the topic. In contacting Microsoft we were told there was nothing we could do that is how it was designed.
REALLY???? (see above)
What we have come up for our approach is that we're currently using the UserID value to set parameters in our data sources, but are looking for more 'elegant' approaches
to security (if they exist) as there are some liabilities with this approach (EX is a report author forgets to put the parameter in the users will get everything back.
QUESTION:
If there is not another approach then we will stay with it. We can't imagine there isn't a better way.
Additionally, the Project user view only contains the identity of the project owner not the rest of the team members (including sponsors who might need to see the data.) so where are they in the database?
Tasks

Hi Paul,
I have a similar situation only I'm using Project Online. I have setup Groups and Categories where there is a relationship between clients and groups, and projects and categories.
Only issue is that when running a report a user receives an error and then all the data shows for all projects irrespective of the group/category/project relationship and the fact that user only exists in one group (and therefore can't see
or access the other projects in PWA outside of their group.
Hope that makes sense.
Regards,
Conrad

Project Server 2013 SSRS reports by logged in user group

Hi All,
We are using project server 2013. We have developed SSRS report. We need to display the projects based on the logged in user security group(e.g Project Manager, Administrator etc.) I tried with the below query got from a forums. But it is not working. Is
there is any way to get the security group of the logged in user using SQL query.
SELECT MSP_WEB_SECURITY_GROUPS.WSEC_GRP_NAME, MSP_WEB_RESOURCES.RES_NAME
FROM MSP_WEB_SECURITY_GROUP_MEMBERS INNER JOIN
MSP_WEB_RESOURCES ON MSP_WEB_SECURITY_GROUP_MEMBERS.WRES_GUID = MSP_WEB_RESOURCES.WRES_GUID RIGHT OUTER JOIN
MSP_WEB_SECURITY_GROUPS ON
MSP_WEB_SECURITY_GROUP_MEMBERS.WSEC_GRP_GUID = MSP_WEB_SECURITY_GROUPS.WSEC_GRP_GUID
Thanks in advance, Taj

Taj,
The query above gives you a complete list of user groups and users. It does not filter by resource name/group.
You can get the logged in user using the "USer Filter" webpart, on which the SSRS report is being displayed (assuming you are displaying it on a SharePoint page). You will need to pass this as a parameter into your SSRS report.
http://www.wonderlaura.com/Lists/Posts/Post.aspx?ID=214
http://www.wonderlaura.com/Lists/Posts/Post.aspx?ID=91
Prasanna Adavi,PMP,MCTS,MCITP,MCT TWitter: @prasannaadavi Blog: http://www.prasannaadavi.com

Cannot preview SSRS report in Visual Studio 2012 - assembly does not allow partially trusted callers

Hi,
I have an SSRS report that works fine in Visual Studio 2008 BIDS. This report references a .Net assembly namely:
System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
I use this assembly in some simple Code functions in the report. e.g.
System.Web.HttpUtility.UrlEncode(inURL).ToString
I have converted the SSRS project to 2012 and am trying to preview the report. However, I get an error relating to: "That assembly does not allow partially trusted callers". If i deploy the rdl to my local SSRS it renders fine, but
how do I fix Visual Studio to preview the report without error? This is highly annoying.
My Visual Studio version is:
Microsoft Visual Studio Professional 2012
Version 11.0.61030.00 Update 4
Microsoft .NET Framework
Version 4.5.51641
SQL Server Reporting Services
Microsoft SQL Server Reporting Services Designers
Version 11.0.3402.0
Any help is appreciated on this one.
Regards,
MrHH

Hi MrHappyHead,
According to your description, you used custom assembly in the report, when you run the report in Visual Studio 2008, the report works fine. When you run the report in Visual Studio 2012, the error message occurred: "That assembly does not allow partially
trusted callers". But the report works fine after you deployed it to report manager.
Only applications that are fully trusted by the runtime code access security system are allowed to access a shared managed code assembly that is not explicitly marked with the System.Security.AllowPartiallyTrustedCallers attribute. A partially trusted assembly
(one that is registered in SQL Server with the SAFE or EXTERNAL_ACCESS permission set) that attempts to access a strong-name signed assembly without this attribute causes a System.Security.SecurityException to be thrown. To troubleshoot the problem, please
refer to the following steps:
Add namespace system.security to AssemblyInfo.cs file
Add [assembly:allowpartiallytrustedcaller] to the file.
Set trust level to "Full" in web.config file
For more information, please refer to the following document:
http://support.microsoft.com/kb/2869522/en-us
If you have any more questions, please feel free to ask.
Thanks,
Wendy Fu

SSRS reports inside SPO 2013 - Question about ADFS

Our SPO 2013 Tenant is secured by ADFS Claims Based.
I understand SSRS integrated is not available for SPO 2013.
We want to allow links from SPO 2013 to SSRS Reports that authenticate with the same ADFS tokens - so no prompting.
Possible? If so, what do we need?
Possible to provision the SSRS server in ADFS? What versions of SSRS will allow this?

Well, should we move this to the Power Query forum and try it there?
Thanks!
Ed Price, Power BI & SQL Server Customer Program Manager (Blog,
Small Basic,
Wiki Ninjas,
Wiki)
Answer an interesting question?
Create a wiki article about it!

SSRS Report Security

Similar Messages

Maybe you are looking for