Working with Access Grant Definitions

This documentation is an older version of Jaspersoft OLAP User Guide. View the latest documentation.

This section describes functionality that can be restricted by the software license for JasperReports Server. If you don’t see some of the options described in this section, your license may prohibit you from using them. To find out what you're licensed to use, or to upgrade your license, contact Jaspersoft.

An access grant definition is an XML structure that specifies a user’s access rights to different parts of the data defined by an OLAP schema. The access grant definition specifies access rights based on roles. Users with a given role have the access rights granted to that role. An access grant definition can also refer to a profile attribute table that control access through properties defined for specific users. This allows you to use variable substitution to create simple, flexible access grants.

•

Overview of Data-level Access Using AGXML Schemas

•

Sample Access Grant Definition

•

Uploading an Access Grant Schema

•

Working with Profile Attributes

•

Best Practices for Designing Access Control

AGXML depends on Jaspersoft’s underlying OLAP engine, and as such only applies to data accessed by a local OLAP client connection (that is, a Mondrian connection). To restrict data accessed via XML/A, define your security in the remote host serving your data; for example, attach an AGXML schema to a Mondrian connection exposed by an XML/A source.