Reporting Services Permissions

[waynegs]

How can check a user's permissions via the web services on SQL reporting services?

Can anyone point me in the right direction?

thanks,

Wayne

 

[waynegs]

Left out some info, the application is using domain authentication. It is SQL 2005 reporting services.

 

[jmeckley]

I haven't worked with secure webservices and my exposure to web services is limited to the MS AJAX interaction.

A quick google search returned the following results

http://www.codeproject.com/cs/webse...asp?df=100&forumid=15963&exp=0&select=1249134

in simple terms you attach a soap header to the service and verify the information within the service.

You would still require SSL if you're concerned about packet sniffing.

Of course your within a windows domain. Maybe you could configure the virtual directory where the services are stored to reject anomomous requests and required Windows Integrated Authentication.

then from within the webservice you could authenticate the current user with the current identity [tt]System.Security.Principal.WindowsIdentity.GetCurrent();[/tt]. This way you don't need to worry about the soap header.

Jason Meckley
Programmer
Specialty Bakers, Inc.

 

[waynegs]

Yea, I am looking for something specific to SQL reporting services. I need to know what functions can be used to check a user's permissions before presenting them with an option to edit report properties.

thanks