I want my report be accessible for everybody. So i enable anonymous access
(IUSR_MACHINE) on the virtual site ReportServer.
On my report, i allow IUSR_MACHINE the Browser Role.
Administrators have all Role on my report.
When i want to acces to the admin page (http://localhost/Reports), I have a
window authentification (like I want), I put my Admin login and pass but I
have not the Administrators rigth. I can only see what the IUSR_MACHINE as
right.
When I disable anonymous acces on ReportServer, I can see everything.
Can you help me 'Karine,
The Report Server itself does not authenticate the user. Instead, it obtains
the user identity from IIS. When Anonymous is enabled, all requests to the
Report Server will come in under the IUSR_<computer name> account or
whatever account you use for Anonymous access. Therefore, the Report Server
cannot differentiate the users.
Since you will need to manage the Report Server you will need to elevate
IUSR permissions in RS or assign it to a Windows group which has management
rights. Both approaches are equally bad from security standpoint and a sure
invitation for a security hack. Besides, Anonymous access is not officially
supported.
--
Hope this helps.
---
Teo Lachev, MVP [SQL Server], MCSD, MCT
Author: "Microsoft Reporting Services in Action"
Publisher website: http://www.manning.com/lachev
Buy it from Amazon.com: http://shrinkster.com/eq
Home page and blog: http://www.prologika.com/
---
"Karine" <Karine@.discussions.microsoft.com> wrote in message
news:49C55288-1B45-44BB-870D-CBDF84420D72@.microsoft.com...
> I want my report be accessible for everybody. So i enable anonymous access
> (IUSR_MACHINE) on the virtual site ReportServer.
> On my report, i allow IUSR_MACHINE the Browser Role.
> Administrators have all Role on my report.
> When i want to acces to the admin page (http://localhost/Reports), I have
a
> window authentification (like I want), I put my Admin login and pass but I
> have not the Administrators rigth. I can only see what the IUSR_MACHINE as
> right.
> When I disable anonymous acces on ReportServer, I can see everything.
> Can you help me '
>
>
>
Wednesday, March 7, 2012
Anonymous access...
Labels:
access,
accessible,
database,
enable,
everybody,
iusr_machine,
microsoft,
mysql,
oracle,
report,
reportserver,
server,
sql,
virtual
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment