Automatically add restrictions to reports based on user

[edoloughlin]

Hi,

 

not sure if this belongs in this forum or in the JasperReports forum. Apologies if it's the wrong place...

 

I'm looking at user JasperReports/JasperServer where data for several customers will be stored in one schema. The plan is to allow customers to log in and run their own reports. This means that any queries they execute will have to be intercepted and restricted. I.e., something like 'WHERE CUSTOMER_ID=xxx' will have to be automatically added in the background before it is run, where xxx depends on the user's id.

 

Does JasperServer or JasperReports support this type of interception?

 

Thanks,

Ed O'Loughlin.

[swood]

When you run a report in JasperServer, there is a LoggedInUser parameter that is passed that includes the user name and the roles the user has. You can use those values to parameterize your query.

 

Sherman

Jaspersoft

[edoloughlin]

Thanks for the info.

We'd also like to allow customers to design their own reports. We can't require/trust them to restrict their reports to their own data - this has to be invisible to them and happen at report execution time. Is this possible?

 

[swood]

Our JasperServer Professional edition has data domains that include security based on the user roles and other attributes. You set up the domain and the end users will be restricted to the views of data you require. You can develop a report based on a domain, and when the user runs the report, they will only get the data they are allowed to see. There are end user query and reporting tools that run in the browser.

 

 

Sherman

Jaspersoft

[shalomd]

How can i do this? what parameter is this?

thanks

Shalom

[swood]

@shalomd,

 

Are you talking about the ${LoggedInUsername} parameter? There is an example of this in the Sales By Month example report that ships with JasperServer.

 

 

Sherman

Jaspersoft