Chapter 20. Securing Report Server Items

Because SSRS is a .NET application, many of the existing .NET security paradigms come into play when securing access to the Report Server. From the end user’s viewpoint, SSRS uses role-based authorization built on top of Windows authentication. If using a custom authentication mechanism, the underlying principals are the same. It is simply up to the authorization mechanism to define valid users and roles (called principals).

Reporting Services Security Model

Role-based authorization is not a new concept. It is a proven mechanism that is implemented in a variety of ways. One of the most common, everyday items that uses role-based ...

Get Microsoft® SQL Server™ 2008 Reporting Services Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.