Publishing Reports to the Web - Downloads - Oracle

About OracleAS Reports Services Security
Oracle Internet Directory stores user and group privilege information which is used by
OracleAS Single Sign-On. Oracle Internet Directory also stores data source security
information on a per user basis. Oracle Delegated Administration Services edits the
information stored in Oracle Internet Directory. Oracle Delegated Administration
Services can be accessed from within OracleAS Portal or separately, as a standalone
component.
Alternatively, you might have your own application for launching reports with its own
login mechanism and user/group repository. In this case, OracleAS Reports Services
provides interfaces that allow you to integrate it with these non-Oracle components.
See Also: Configuring OracleAS Reports Services Security
For more information on these interfaces.
9.1.1.2 Resource Security
Resource security ensures that only authorized users or groups execute a specific
report. It also keeps users or groups from accessing particular printers or Reports
Servers for the execution of the report. You might well imagine a situation where
certain printers and servers might be reserved for a particular group of users.
Alternatively, some printers and servers may simply be inaccessible during certain
times for maintenance activities.
Once it is determined that a user has the necessary privileges to execute a given report
via the specified Reports Server to the specified destination, then the user's privileges
to the data source accessed by the report must be ascertained.
OracleAS Portal provides resource security for reports, printers, calendars, and
Reports Servers out of the box. In a typical configuration, the administrator or
developer could specify which users and groups could access which reports, Reports
Servers, and printers from OracleAS Portal.
As with application security, you might have your own mechanism for protecting
resources. In this case, OracleAS Reports Services provides interfaces that allow you to
integrate it with these non-Oracle components.
See Also: Configuring OracleAS Reports Services Security
For more information on these interfaces.
9.1.1.3 Data Source Security
Data source security defines the users or roles that can access the data within the given
data source. A report might access multiple data sources and the current user must
have privileges on all of the data sources accessed by the report in order to run it and
view the output. The data source administrator (typically a DBA) grants access to data
sources. Data source security must be established and in place prior to configuring
your reports environment.
You can provide for data source security in two different ways with OracleAS Reports
Services:
■ You can associate data source connection information with a Single Sign-On user.
In this case, the first time a user attempts to access the data source, Oracle
Delegated Administration Services prompts them to create a resource for their
data source connection. After the user creates this data source resource, OracleAS
Single Sign-On associates it with the user in Oracle Internet Directory. Once the
data source resource is associated with the Single Sign-On user, it becomes part of
their Single Sign-On identity and they can access the data source without having
to log into it separately. This method has two key advantages. First, it enables each
9-2 Oracle Application Server Reports Services Publishing Reports to the Web