The difference between "security login name" and "Security user:
-
- "Security Login Name" is added in the following way: <Server Name> --> Security --> login name, right-click and choose "New login name"
-
- "Security user": users of specific database -- Security --, right-click and choose "New User". In the pop-up "Database User Interface", the user name can be customized as needed, the login name must be an existing "Security Login Name"
-
- The principle of applying security filter to report model items is that a field is required to store the corresponding Windows Logon account in the table to enable security filter, and an adventureworks data employee table is used as an example. Loginid stores the Windows Logon account of an employee. The built-in getuser () function of reporting Serivce provides an account for the current login user, and uses expressions to filter information that is not the current user, such as: loginid = getuser (), you can exclude the data that the current user does not see.
-
- In addition to the correct expression, perform the following steps:
-
- The getuser () filter expression (assumed name: useridfilter) is set as follows:
- Useridfilter, attribute isfilter is set to true,
- Useridfilter. Set the property "hidden" to "true". This identifier is generally not visible to users.
- Select the entity to which the useridfilter belongs,
- Select"Securityfilters"Properties, and then click the ellipsis (.... Will open"Attribute reference Set Editor"Dialog box.
- Click"Add".
- Will open"Security filter attributes"Dialog box.
In"Field"List, select"Useridfilter". Click "OK"
Go to the report center. Assume that the report model we use is "Adventure works ".
- Double-clickAdventure worksAnd then click"Model item security".
Selected"Protect the items of this model separately"Check box. To apply model item security, select this check box
SelectAdventure worksTop node.
Select"Assign read permission to the following users and groups (separated by semicolons".
TypeEveryoneAnd then click"Application".
Now, the entire report model is visible to all users with the report model permission.
Expand the "employee" entity. Select the "useridfilter" attribute.
Select "Assign read permission to the following users and groups (separated by semicolons.
To grant access permissions to el0 and garrett1, type <computername> \ cancel0; <computername> \ garrett1, and then click Apply ".
-
Verify the Security Settings of Rachel Valdez
- use the report designer to create a simple report that contains only one field of the employee entity: loginid, and then save the report "Report 1"
- right-click Internet Explorer , and then click RUN identity
- In the "User Name" box, type / cancel0 .
-
In the password box, type pass12, word .
-
click "OK"
-
open report 1. Only one row of data is displayed, and only el0's data is displayed.