Preventing direct access to sub-reports

[Yazster]

Hi All,

Is there a way to include a sub-report in a report from a url rather than from the same project?

Reason I'm asking is because I have a report with 4 sub-reports in it. I want users to access the main report directly, and not the subreports. I've hidden them, but a user just has to select SHOW DETAILS and they all show up. Is there a way to prevent users from accessing the sub-reports directly other than simply hiding them?

Any help would be greatly appreciated.
Thanks in Advance,
Yazster

 

[Auguy]

Not quite sure what you are looking for and your question may be more advanced than my answer, but I have used an IIF in the “Jump to URL” navigation to block some users from displaying sub reports. I used this on a sales report to only let the responsible salesman see the detail report with commission, etc. on it.



Auguy
Northwest Ohio

 

[Yazster]

Thanks for the reply. That works fine when you're in the main report trying to filter when the sub-report is displayed.

What I'm looking for is when a user goes into in the ReportServer site, and sees the actual physical reports (and sub-reports). I want to prevent them from actually executing the sub-report directly. I would really prefer to not have to build individual security within each sub-report, although this is always an option.

I've done the obvious, hide the actual reports, but the users can simply click "show details" and see them. I've also prevented access to the report folder containing the reports (main + subs), and enabled access (everyone) for each individual report inside. This works fine, except that I need an outside link to the main report, as users would be unable to simply navigate through the folder structure, find the main report, and execute.

This is why I was wondering if there was a way to call a sub-report from a different folder/project, this way I could enable the main report and folder, and house the sub-reports in a different folder where direct access to the folder would be disabled, but the individual reports would be accessible to the main report.

Hope this makes a little more sense

 

[Auguy]

Probably beyond my level of knowledge for what you are trying to do. I know you were trying to avoid setting security for each sub report, but could you possibly pass a "Run Code" to the sub reports from the main report and have the sub reports only run when they have the proper "Run Code"? Anyone trying to run the sub reports directly would have to know the "Run Code". Kind of clunky, but it might work.

Auguy
Northwest Ohio

 

[Yazster]

Right now I pass NT account names to each sub report and each one is validated that way. So I'm able to prevent the actual information from being displayed, but I was really hoping there was a way to simply not have these reports show up at all.

Thanks for taking the time to try to help out.

 

[bburnell]

If you are using SQL 2005 or below, you could essentially block that address in IIS. That's another forum though I'd think. Worth a shot though. Good luck!
~Brett

--------------------------
Web/.net Programmer & DBA
Central PA

 

[xlbo]

Not sure about 2005/2008 but can't do this in 2000 without basically creating your own interface for the reports. The Report Manager is simply and ASP .NET page so can be tweaked or you can build your own interface to the reports which would allow you to control precisely what users see (or not)

Rgds, Geoff

We could learn a lot from crayons. Some are sharp, some are pretty and some are dull. Some have weird names and all are different colours but they all live in the same box.

Please read FAQ222-2244 before you ask a question