after finding many posts related to direct url access to the reports,i did following changes edit 1. in my jasper server i have a report job which runs only once up on request and saves the out put files either in format pdf/xl in folder reports/ScheduledReports. i changed the permission on the folder. for ROLE_ANONYMOUS i have give read only permission. edit 2. as mentioned in many posting i tried to change property value in the bean filterInvocationInterceptor of applicationContext-Security.xml file. But in jasper server 4.00 i dont find the 'filterInvocationInterceptor' bean in applicationcontext-security.xml. i was able to find this in the file applicationContext-security-web.xml under C:\Program Files (x86)\jasperreports-server-4.0\apache-tomcat\webapps\jasperserver-pro\WEB-INF directory i changed the /fileview/** = ROLE_ANONYMOU,ROLE_USR,ROLE_ADMINISTRATOR and moved this to top of the list after doing above two changes i restarted the tomcat server and tried to access the report, but i am getting the null pointer exction like http status 500 null pointer exception the url i used-- http://jasperserver4332:8080/jasperserver/fileview/fileview/reports/Scheduled_Reports/CustomerReport-109043.pdf attached is the complete error message could any body tell what should i do to solve this issue.