Creating user in Oracle to allow reporting abilities

[voirin]

Hi, would anyone know how to create a user within Oracle Enterprise Manager to allow full READ access for report generation. What I mean is that I have created a bunch of reports for our users. The only part of the report they require access to is the "Select Expert". Once they specify the details in Select Expert, the report will be generated. What kind of Oracle user access is required to perform this? How do I create this account within Oracle's Enterprise Manager interface? We are using Oracle 9.2

Any help most appreciated!

Cheers,
voirin

 

[IanWaterman]

Why don't you just make use of Crystal functionality and use Parameters with which users can change filters within the select statement.

This is much safer as giving users access to select expert is dangerous as they can completely ruin your report if they do not know what they are doing.

Ian Waterman
UK Crystal Reports Consultant

 

[nursegeek]

voirin,
I agree with Ian...I'd also create parameters if appropriate. However, we also use layered security with Oracle so that some users can have read-only access to data without being able to change any data via other means (ODBC, TOAD, etc.)
I've got Oracle 8.5...I'd assume (danger, Will Robinson!!) that 9 wouldn't be radically different. In 8.5 you would go to Database Administration in the Oracle program group, then select Security Manager. This application allows you to add users and assign them query only roles. We gave this user the name of "runreports" and a password of new. The Query role can be restricted to a few tables, or encompass the entire schema. if no such role exists, you could create one...just remember that the only privilege you should give for each table is SELECT.

 

[Turkbear]

Hi,
Do not confuse Oracle's user accounts with the functionality of Crystal Reports..As long as a user has database access to the tables/views/SPs used by the report, they can do anything within the report itself..Change fields, modify the selection criteria, etc

The user only needs SELECT ( or, in the case of SPs , execute) rights to the objects needed by the report.

I prefer to create a read-only role and assign a generic user account to that role..The Tables/Views/etc that are needed for the reports that we design are then added to that roles Object right's ( Select only).






To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[voirin]

Thanks for the information! I have implemented parameters within the repors, as well as creating a user account within oracle having SELECT only rights. It works really great now (you can tell i am new to Crystal).

Just a few more questions...

1) Users will always have to enter their username/password to access the database to create a report? Isn;t there some way of setting up a report to remember this information?

2) How do you restrict modification to the report's design? I have simply set the report's file attribute to Read-only within windows. This is obviously not strong enough. I cannot assign user-level security to the file within windows as we are part of a restrictive SOE environment. Isn't there some feature within Crystal to protect the design against users?

Thanks!

Cheers,
voirin