Question about security of parameters

ostrich

I intergrated the birt report engine into my own application and use parameters to assign the information for the database connection. Because of the report viewer (and creator) should not know this database connection information, I defined several variables like the url, user and password inside my application.

My question is the following: Is there a way for the report viewer to get this database connection information by displaying them in a custom report or something like that? Or is my approach secure enough???

bhanley

You can bind the connection-specific information to parameters. These parameters can then be supplied through a parameter request page (the user supplies them) or supplied behind the scenes at view time by your application.

You set these bindings up on the Data Source editor window. Look to the left for the "Property Binding" group.

You can bind:

1) JDBC Driver Class
2) JDBC URL
3) User name
4) Password
5) JNDI URL
6) Connection Profile Name
7) Connection Profile Store URL

To bind these properties to parameters, launch the expression editor for each property you want to bind, and enter an expression like this "params["JDBC_URL"]". Then just ensure you have added a parameter with the same name to the report design and you should be all set.

I hope this is what you were looking for. Let me know if you still have any questions.