Publishing Reports to the Web - Downloads - Oracle

Configuring OracleAS Reports Services Security
above security components, you can still configure a secured Reports Server, which
provides security similar to that available in Oracle Reports6i.
Note: At the highest level, all communication to and from Oracle
HTTP Server may be configured to use SSL. The Oracle HTTP
Server incorporates an OpenSSL module to provide support for
Secure Sockets Layer (SSL) and HTTP Secure Sockets Layer
(HTTPS). Once this is set up in the Oracle HTTP Server (see Oracle
HTTP Server Administrator’s Guide), rwservlet automatically
detects the SSL port number.
9.2.1.1 OracleAS Portal
OracleAS Portal provides a number of security features available to OracleAS Reports
Services that enable you to ensure that the appropriate users are getting important
data in a secure fashion. With OracleAS Portal security features in place, your users see
only the data they’re supposed to see.
Use OracleAS Portal to control:
■ Who has access to each report
■ When a report can be run
■ Which servers and printers can be used to run a report
■ Which report parameters a user can edit with what range of values
OracleAS Portal is a browser-based, data publishing and developing solution that
offers Web-based tools for publishing information on the Web and building
Web-based, data-driven applications.
OracleAS Portal is tightly integrated with OracleAS Reports Services to create a robust
and secure data publishing environment. OracleAS Portal provides easy-to-use
wizards for setting up OracleAS Reports Services security. These include wizards for
defining user access to reports, Reports Servers, printers, output formats, and report
parameters.
Once you define access control information, it's stored in the OracleAS Portal
repository. As an OracleAS Portal user, you can then, optionally, publish registered
RDFs and JSPs to an OracleAS Portal page. As with all OracleAS Portal functionality,
using Portal to deliver your reports is not required. You can deliver reports through
command lines, as you may always have, and still benefit from the access control
features available to you through OracleAS Portal.
Access to OracleAS Reports Services’ security features is not dependent on whether
you also use Portal to publish report links or report content. Even if you don't publish
via Portal, you can still take advantage of the OracleAS Reports Services’ security
features available in OracleAS Portal to control user access to all of your reports.
When you expose a report as a portlet through OracleAS Portal, OracleAS Reports
Services leverages the Single Sign-On feature. Single Sign-On eliminates the need for
users to enter multiple logins, first to the portal then to each of the reports exposed
through portlets within the portal. With OracleAS Single Sign-On, when you log in,
OracleAS Portal automatically logs you into all registered portlet providers and
subsystems.
Securing OracleAS Reports Services 9-9