Disable access to a specific flow

Issue:

In some cases you need to disable user access to some features of JasperReports Server, for example, Dashboard Designer.

Solution:

• Edit <js-install>/WEB-INF/applicationContext-security.xml
• Find bean id="flowVoter"

• Add this line above the repoAdminFlow:

  dashboardDesignerFlow=ROLE_ADMINISTRATOR
  

• Your flowVoter should look like this now:

  <bean class="com.jaspersoft.jasperserver.api.security.FlowRoleAccessVoter"
        id="flowVoter">
       <property name="flowAccessAttribute" value="FLOW_ACCESS" />
       <property name="flowDefinitionSource">
          <value>dashboardDesignerFlow=ROLE_ADMINISTRATOR
                 repoAdminFlow=ROLE_ADMINISTRATOR
                 userListFlow=ROLE_ADMINISTRATOR ...
          </value>
       </property>
  </bean>
  

• Restart your application server

N.B. You can check for list of available flows in <js-install>/WEB-INF/flows

References

For more information please follow Allow Anonymous Access to Reports#Modify_Spring_Configuration_Files