Security Issue 1

[durug]

Hi everybody!

I have an Order Report for all Suppliers. They will access it via Web.
the path will be:

http://server_name/b2b/order.rpt?init=actx&SupplierID=1

where the SupplierID will be passed as a parameter so that the Supplier will see only his order.

The above link is the path for SupplierID = 1

But if another SupplierId = 2 will know the SupplierID from another Supplier they will see the Report from Supplier #1

What can be done? Of course each supplier will login with his name and password to his site. Because there will be 100 Supplier it doesn't make any sense to create 100 reports for each Supplier.

The platform is IIS 5, ASP, VB, SQL7
Thanks a lot.
Durug

 

[chelseatech]

I created a solution for one customer by putting the security into the rpt file.

You need a PIN or password field that is unique for each supplier.
Add a second paramater to your report and add to the selection formula..
and {supplier.Password} = {?password}

Then on your web page, pass the Password to the report as well. Your supplier would have to know the other supplier number and password or the report will be empty. Editor and Publisher of Crystal Clear

http://www.chelseatech.co.nz/pubs.htm