Publishing Reports to the Web - Downloads - Oracle

9
Securing OracleAS Reports Services
The celebrated openness of the Internet brings with it concerns about controlling who
has access to what confidential company information. OracleAS Reports Services
provides a number of security options that enable you to ensure that the appropriate
users are getting important data in a secure fashion. This chapter provides an
overview of the available security options.
■ About OracleAS Reports Services Security
■ Configuring OracleAS Reports Services Security
9.1 About OracleAS Reports Services Security
This section describes how OracleAS Reports Services security operates to secure
access to your reports and the data they include.
■ Resources Protected
9.1.1 Resources Protected
■ Authorization and Access Enforcement
■ Leveraging Oracle Identity Management Infrastructure
OracleAS Reports Services encompasses functionality for three main areas of security:
■ Application security (i.e., controlling access to the report application, where users
launch report requests)
■ Resource security (i.e., controlling access to reports, printers, calendars, and
Reports Servers)
■ Data source security (i.e., for controlling access to a particular database)
9.1.1.1 Application Security
Typically, users must log on to an application or site from which they can access and
run their reports. This launcher application is typically protected by some sort of login
facility, such as OracleAS Single Sign-On. Once they successfully gain entry into the
launcher application, resource security takes over and determines which reports and
destinations a given user or group may request.
For application security, OracleAS Single Sign-On provides a single point of user login
and, optionally, data source security. In a typical configuration, the user would log on
through OracleAS Single Sign-On to gain access to a report application, where they
would access and run their reports.
Securing OracleAS Reports Services 9-1