Jump to content

Domain: dynamic user profile attribute for row level security


Recommended Posts

I have a business database where some users (role Manager) have access to multiple and different "sites" (there are numerous combinations, so having a different role for each is out of purpose - managed sites evolve during time).
I need to provide row level security where each Manager has only access to his sites data.

From what I read for now, domain seems the way to go but on every sample I found (as this one), user profile attributes are "hardly set" in the database/user profile attribute configuration.

Is there a way to dynamically get sites from the business database? Shall we synchronize business database with user profile attributes?
I didn't find any clue in the Authentication cookbook.
What's the best practice on this?

Finally, it is not very clear for me, is Domain only a commercial feature?


Link to comment
Share on other sites

  • Replies 2
  • Created
  • Last Reply

Top Posters In This Topic

Top Posters In This Topic

Domain is a commercial edition feature that is not available in JRS community edition of the product. In the current version of JRS-Pro (AKA commercial edition) 5.5, user can use user profile attribute to secure/select its data. User can code their own Java logic to create or update user profile table entries through external authentication custom processor. This is discussed  in JasperReports Server Authentication Cookbook, section 6.3 "Creating a Custom Processor".

In the upcoming JRS 5.6 release (in May 2014), its external authentication framework will allow token based protocol that user can inject user profile data through SSO directly.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Create New...