1

Identified the dimensions upon which to base access control. CZS chose the Geographical Area and Product Department dimensions.

Dimensions

2

Identified and created access roles. CZS identified two roles: one for managers and another for sales reps. Both are granted access to the Ad Hoc view.

Determining Roles

3

Assigned the appropriate roles to each user based on each employees’ responsibilities.

Selecting Users for the Roles

4

Identified the attributes that will be defined for each user. CZS identified five attributes: Country, Region, State, Cities, and ProductDepartment.

Attributes and Variable Substitution and Assigning Attributes

5

Defined the correct values for each user’s attributes by editing user accounts.

Defining Attributes for Users and the JasperReports Server Administrator Guide

6

Created an AGXML (access grant definition XML) file that defines the access granted to users with each role and attribute.

Using Attributes in an Access Grant Definition and
Reference Material

7

Created a Mondrian connection that pointed to their sales data and included the sales access grant definition.

Creating a Mondrian Connection

8

Created the Ad Hoc view that points to the Mondrian connection.

Creating a Sales Numbers Ad Hoc View

9

Tested the view as various users.

Testing the Results