Hi all,
I've tried the docs to implement restriction by Role and ORG but failed.
ref: http://community.jaspersoft.com/documentation/tibco-jasperreports-server...
I'm running the paid instance v6.0.1 on AWS. I've tried both [js] and [authz] tags. None is working for me.
<js:authorize ifAllGranted="ROLE_USER|kfc">...</js:authorize>
<authz:authorize ifAllGranted="ROLE_USER|kfc">...</authz:authorize>
However, if I remove the ORG part and only restrict by Role, that works for me.
Is there anything I did wrong or it's a bug?
1 Answer:
I will try to replicate this but a couple of questions to see if the problem is not in the Org/role setup.
Is XYZ the Organization ID or the Organization Name? in the autz: tag you need to use OrganizationID not the name.
Do you have a ROLE_USER created under Organization xyz? Remember that in JRS the Roles can be at the top level or ar the ORG level. The ROLE_USER that is already created by default in the repository is a top level role, not an organization level role.
See the screenshot below (logged in as superuser)..
You can see there that ROLE_NOUSER is an organzation level role (you can see the organization ID next to it); while ROLE_USER is a top level role ( i.e. no organization ID next to it) intherited by that Org
Hi marianol, Thanks for your inputs. I got it there're two types of roles, one global and the other under certain orgs. Now I just tried create a new role under an org and it seems still not working.
Steps to reproduce/verify:
The above happens for both js and authz tags. Any thoughts on this?
Let me try to replicate this so i can look into it... it may be a bug.