How to Allow ROLE_ADMINISTRATOR Role Access to Log Collectors Page

Issue Description

By default, in commercial editions of TIBCO JasperReports^® Server only superuser has access to 'Log Collectors' menu:

http://community.jaspersoft.com/documentation/tibco-jasperreports-server-administrator-guide/v621/using-log-collectors

Customer needs to configure JasperReports Server to allow ROLE_ADMINISTRATOR role access to log collectors.

Resolution

In order to make Log Collectors work with ROLE_ADMINISTRATOR role, you have to modify WEB-INFapplicationContext-security-pro-web.xml config file:

• add the following line within security:filter-security-metadata-source definition

  <security:intercept-url pattern="/logCollectors.html" access="ROLE_ADMINISTRATOR" />

• permit access to /rest_v2/diagnostic URL for ROLE_ADMINISTRATOR:

  <security:intercept-url pattern="/rest_v2/diagnostic/**" access="ROLE_SUPERUSER,ROLE_ADMINISTRATOR" />

Restart JaspreReports Server, log in as jasperadmin and manually point to jasperserver-pro/logCollectors.html page in URL.

Solution tested in JasperReports Server v.6.3.0. Please note, Log Collectors feature is not fully designed/tested

to work with multitenancy (under jasperadmin) in v.6.3.0.

Especially, there is no data isolation within a specific organization in generate logs.

That is, jasperadmin can get all server-related data.

Ref. Case 00071520