JasperReports Server - Domain Security File and Configuration

Find below a step by step guide to setting up Domain Security (Row Based) :

1. Create a role on which to apply the security settings from Jaspersoft Server

   

2. For each of the users which you want to apply the security settings to, create user accounts, add them to the above role.

   

3. For each of the Users add some attributes which will filter what they can and can't see when they access a given domain.

   

4. When you create the Domain use a Security File (attached and example) which uses the above information to apply to the domain.

   The magic is really here ...

   <resourceAccessGrant id="Jointree_1_row_access_customers">
       <principalExpression>
           authentication.getPrincipal().getRoles().any{ it.getRoleName() in ['AUC_USER'] }
       </principalExpression>
   

   Then apply the "Principal Expression" to the role that you created above.

       <filterExpression>
           Locations_T.Region in (groovy('authentication.getPrincipal().getAttributes().find{ it.attrName == "Region"}.attrValue.split(",").collect {"''" + it + "''"}.join(",").replaceFirst("^''","").replaceFirst("''$","")'))
       </filterExpression>
   </resourceAccessGrant>
   

   Then change the table on which you need to apply the filter and the attribute you want it to be tied to.

   Then to test that it works, login as a given user and make sure you can only see the data you were expecting.

If during the adhoc explore process you get errors, this is down to the attribute definition in the user definition having errors.

The example I have given is for multiple comma separated regions.

academy_use_case_security_settings.xml