Home
Analytics
Birt report viewer security
Arif shah
<p>Hi,</p><p> </p><p>Can someone please explain how security works in Birt Report viewer. What are the options with me If I want to</p><p> </p><p>1) Implement User Authentication</p><p>2) Https configuration/setup</p><p>3) Row level and column level security</p><p> </p><p>Regards</p><p>Arif</p>
Find more posts tagged with
Comments
micajblock
<p>There is no security in the BIRT Viewer. The BIRT iHub (commercial product) provides this. If you only use OS BIRT you need to build this on your own.</p><p> </p><p>HTTPS should work at the application level and will not affect the viewer.</p>
Arif shah
<p>OK so the apache basic authentication and https will cover the user authorization for birtviewer while for row level and column level security, I need to implement it myself by passing the user as parameter to the query?</p><p> </p><p>Arif</p>
micajblock
<p>Not exactly. BIRT is embedded in the application. The application deals with authentication and HTTPS. BIRT Viewer has no authentication, but since BIRT is part of the application it uses the application authentication. Think of BIRT as just another web page in your application.</p>
Arif shah
<p>I am using Birt OS</p>
Arif shah
<p>What if I don't want to embed the report into any other application. If I simply want to enfore user authorization before accessing the Birt report, is there any example how can I do that?</p><p> </p><p>Arif</p>
micajblock
<p>How are you deploying the BIRT Viewer? If Tomcat that is your application. How are users logging in? What are you using for user management? All this will define how you write your code. You will need some how to check user and store privileges somewhere. This is not a trivial task and one of the added values for Commercial BIRT.</p>
Srinivas Yarra
<p>Hi,</p>
<p> </p>
<p>We are using the Birt iHub server and want to access those reports from my web application which is running in the jboss. we are doing <span>authorization through ldap for my web app. what is the best way to do authentication before accessing the report from iHub server.</span></p>
<p> </p>
<p><span>Thanks,</span></p>
<p><span>Srinivas</span></p>
micajblock
<p>The this documentation should help:</p>
<p><a data-ipb='nomediaparse' href='
http://developer.actuate.com/be/documentation/ihub3-dev/sag/index.html#page/admin/UMC_accounts.08.03.html#ww142823'>http://developer.actuate.com/be/documentation/ihub3-dev/sag/index.html#page/admin/UMC_accounts.08.03.html#ww142823</a></p>
;
<p> </p>
<p>There are other options for security integration including RSSE.</p>
<p> </p>
<p>As security is one of the most important aspects of an application, I would recommend contacting Actuate professional services to assist with the implementation. They have done this many times in the past and know best practices.</p>