Security Issues

The Remote Repository seamlessly integrates into the security measures of i-net Clear Reports. To unlock the full potential of the Repository to individual users you should provide the system with a valid login type, e.g. Windows authentication.

Permissions

With activated "Restrict Permissions" in the "Users and Groups" dialog of the Configuration Manager you can decide which users/groups can access features, like the "Repository". The feature "Repository" enables the user to use the repository feature in the Remote Interface. The feature "Remote Designer” enables the user to access the Repository from within the i-net Designer.

Note: The All Users group should not be assigned both, the Repository AND Designer permissions - otherwise users will not be able to authenticate themselves due to very user being allowed to use the repository. Hence user directories and specific permissions will not work.

Report Permissions

The Report Permissions fully apply to the report files in the repository, meaning you can provide individual read, write and execute permissions for your reports.

Privileged users can edit the report permissions directly in the Repository Browser of the Remote Interface.

The "Administrate Permission" button in the repository browser will be enabled if Permissions are enabled and one of the following conditions apply:

  • The user is System Administrator (if the login type 'Master Password' is activated in the configuration or the selected authentication mechanism is not available).
  • The user has the right to access the Configuration Manager.
  • The user is allowed to read and change the selected folder.
Figure 1: Permissions in Repository Browser

Displaying the permissions

Users can see their permissions in the report file table of the Repository Browser or the properties panel of a report file. There are three distinct rights to limit the access:

  • "r" - report file is readable, meaning the user can see and download it
  • "w" - report file is writable, meaning it can be altered, renamed, moved and deleted
  • "x" - report file is executable, meaning the current user can run and export the report

The user rights are being displayed color-coded depending on where the right has been set: global or in the folder.

  • Blue: The access right has been defined as folder permission in the Repository Browser.
  • Green: The access right has been globally defined in the configuration, e.g. with "Execute All Reports" or "Restrict Permissions" is disabled.

Simulated Folder Permissions

Since i-net Clear Reports does not directly offer folder permissions - unlike UNIX or Windows file systems - the folder permission depends on the rights the user has for reports in this folder.

A folder is visible if there is at least one pattern defined which grants read access to a report file in this folder. There must not actually be a report in the folder yet - the possibility to read a report file fulfills the condition.

To upload reports or create sub-folders, rename or move folders in the Repository, there has to be at least one pattern defined which grants write access to a report file in this folder. There must not actually be a report in the folder yet - the possibility to write a report file fulfills the condition.