Custom Authorization

Hi,
I was wondering if it was possible to setup RS to use custom
authorization with out implementing custom authentication ? I want to
use windows authentication for authentication, and custom
authorization. If its possible how would I go about configuring it ?
ThanksHello,
you can't implement both (Forms and Windos) authentications together!
Your first question is a bit confusing, I'm not shure if I understand it
correct.
You can find out how to implement forms authentication in the following
article:
http://msdn2.microsoft.com/en-us/library/ms160724.aspx
A sample application can be found in samples bellowe the SQL Server
installation directory. If requiered you can install this sample with the
installation CD or download them as described in the article.
There are some traps in this article, especialy with w2k3 server.
For the report manager the instructions are not working. You need to
configure Windows instate of forms in the config file.
You need to followe the instruction carefully and expect some traps and time
for googling, trial and error etc.
"ismell1@.gmail.com" wrote:
> Hi,
> I was wondering if it was possible to setup RS to use custom
> authorization with out implementing custom authentication ? I want to
> use windows authentication for authentication, and custom
> authorization. If its possible how would I go about configuring it ?
> Thanks
>|||I'm not trying to use both of them together, I'm trying to use windows
<b>AUTHENTICATION</b> and use custom <b>AUTHORIZATION</b>.
I wan't my users to be authenticated via windows security but I wan't
to control what they have access to via my custom extension. I
couldn't find anything in the config files but what I ended up doing
was replacing the windows authorization config line with mine and it
loaded the DLL just fine.
<pre>
<Security>
<!--<Extension Name="Windows"
Type="Microsoft.ReportingServices.Authorization.WindowsAuthorization,
Microsoft.ReportingServices.Authorization"/>-->
<Extension Name="Windows" Type="rxLibrary.rxSecurity, rxSecurity"/>
</Security>
</pre>
Now my problem is that when i try and load the ACL i get a
serialization exception "The input stream is not a valid binary
format. The starting contents (in bytes) are: XX-XX...". After doing
some research I think its because the security description was created
with the windows dll. So now I have to figure out how to clear the old
security descriptions and I can create new ones using my
CreateSecurityDescriptor function.
Any help would be appreciated.
Thanks
On Jan 21, 1:23 pm, Ralf Stofer <RalfSto...@.discussions.microsoft.com>
wrote:
> Hello,
> you can't implement both (Forms and Windos) authentications together!
> Your first question is a bit confusing, I'm not shure if I understand it
> correct.
> You can find out how to implement forms authentication in the following
> article:http://msdn2.microsoft.com/en-us/library/ms160724.aspx
> A sample application can be found in samples bellowe the SQL Server
> installation directory. If requiered you can install this sample with the
> installation CD or download them as described in the article.
> There are some traps in this article, especialy with w2k3 server.
> For the report manager the instructions are not working. You need to
> configure Windows instate of forms in the config file.
> You need to followe the instruction carefully and expect some traps and time
> for googling, trial and error etc.
> "isme...@.gmail.com" wrote:
> > Hi,
> > I was wondering if it was possible to setup RS to use custom
> > authorization with out implementing custom authentication ? I want to
> > use windows authentication for authentication, and custom
> > authorization. If its possible how would I go about configuring it ?
> > Thanks|||I was trying to create custom a authorization extension with out having to
use forms authentication. I didn't see any thing in the config files for
setting that. So what I ended up doing was replacing the Windows
authorization module with my own.
<Security>
<!--<Extension Name="Windows"
Type="Microsoft.ReportingServices.Authorization.WindowsAuthorization,
Microsoft.ReportingServices.Authorization"/>-->
<Extension Name="Windows" Type="rxLibrary.rxSecurity, rxSecurity"/>
</Security>
This seems to work just fine, now my problem is when I try and deserialize
the ACL's I get a "The input stream is not a valid binary format" Exception.
after doing some research i found that the ACL was created using the Default
CreateSecurityDescriptor function, so my extension can't deserialize it.
So now I'm wondering if its possible to clear the secuirty descriptors for
all objects on the server ?
Thanks,
Raul
"Ralf Stofer" wrote:
> Hello,
> you can't implement both (Forms and Windos) authentications together!
> Your first question is a bit confusing, I'm not shure if I understand it
> correct.
> You can find out how to implement forms authentication in the following
> article:
> http://msdn2.microsoft.com/en-us/library/ms160724.aspx
> A sample application can be found in samples bellowe the SQL Server
> installation directory. If requiered you can install this sample with the
> installation CD or download them as described in the article.
> There are some traps in this article, especialy with w2k3 server.
> For the report manager the instructions are not working. You need to
> configure Windows instate of forms in the config file.
> You need to followe the instruction carefully and expect some traps and time
> for googling, trial and error etc.
>
>
>
> "ismell1@.gmail.com" wrote:
> > Hi,
> > I was wondering if it was possible to setup RS to use custom
> > authorization with out implementing custom authentication ? I want to
> > use windows authentication for authentication, and custom
> > authorization. If its possible how would I go about configuring it ?
> >
> > Thanks
> >

Custom authentication support in RS 2000

Hi,
I read somewhere that only Integrated Windows Authentication is
supported in RS 2000. Out Web application has internet users, so I
cannot use IW authentication.
Is there any way to use custom authentication (form based)?
Without this we cannot use RS in our application.
Please help.
regards,
Sachin.Hi Sachin,
I don´t know if there´s a way to use form based authentication in rs - I
don´t believe so.
A possible workaround:
run the rs-web under a useraccount who may use rs (but then you can´t differ
between the internet-users) and build your own web-frontend in front of the
rs-web where users only see their reports... a lot of action but full
control.
hth, Tony
"sachin laddha" <sachinladdha@.gmail.com> schrieb im Newsbeitrag
news:1143199592.405622.169790@.g10g2000cwb.googlegroups.com...
> Hi,
> I read somewhere that only Integrated Windows Authentication is
> supported in RS 2000. Out Web application has internet users, so I
> cannot use IW authentication.
> Is there any way to use custom authentication (form based)?
> Without this we cannot use RS in our application.
> Please help.
> regards,
> Sachin.
>|||Yeah there is. There are several articles on how to do so. And samples
that come with RS2000 and 2005.
However, Custom (forms) authentiation only works in Developer Edition and
Enterprise Edition of 2000, it works with standard in 2005.
"Toni Pohl" <atwork43@.hotmail.com__nospam> wrote in message
news:uTVRWk0TGHA.5884@.TK2MSFTNGP14.phx.gbl...
> Hi Sachin,
> I don´t know if there´s a way to use form based authentication in rs - I
> don´t believe so.
> A possible workaround:
> run the rs-web under a useraccount who may use rs (but then you can´t
> differ between the internet-users) and build your own web-frontend in
> front of the rs-web where users only see their reports... a lot of action
> but full control.
> hth, Tony
> "sachin laddha" <sachinladdha@.gmail.com> schrieb im Newsbeitrag
> news:1143199592.405622.169790@.g10g2000cwb.googlegroups.com...
>> Hi,
>> I read somewhere that only Integrated Windows Authentication is
>> supported in RS 2000. Out Web application has internet users, so I
>> cannot use IW authentication.
>> Is there any way to use custom authentication (form based)?
>> Without this we cannot use RS in our application.
>> Please help.
>> regards,
>> Sachin.
>|||Using Forms Authentication in Reporting Services.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsql2k/html/ufairs.asp
Sadly, as was mentioned, it needs Developer or Enterprise Edition in RS
2000.
"Chris Taylor" <ctaylor7480@.newsgroups.nospam> wrote in message
news:%23Do3Wu2TGHA.4792@.TK2MSFTNGP14.phx.gbl...
> Yeah there is. There are several articles on how to do so. And samples
> that come with RS2000 and 2005.
> However, Custom (forms) authentiation only works in Developer Edition and
> Enterprise Edition of 2000, it works with standard in 2005.
> "Toni Pohl" <atwork43@.hotmail.com__nospam> wrote in message
> news:uTVRWk0TGHA.5884@.TK2MSFTNGP14.phx.gbl...
>> Hi Sachin,
>> I don´t know if there´s a way to use form based authentication in rs - I
>> don´t believe so.
>> A possible workaround:
>> run the rs-web under a useraccount who may use rs (but then you can´t
>> differ between the internet-users) and build your own web-frontend in
>> front of the rs-web where users only see their reports... a lot of action
>> but full control.
>> hth, Tony
>> "sachin laddha" <sachinladdha@.gmail.com> schrieb im Newsbeitrag
>> news:1143199592.405622.169790@.g10g2000cwb.googlegroups.com...
>> Hi,
>> I read somewhere that only Integrated Windows Authentication is
>> supported in RS 2000. Out Web application has internet users, so I
>> cannot use IW authentication.
>> Is there any way to use custom authentication (form based)?
>> Without this we cannot use RS in our application.
>> Please help.
>> regards,
>> Sachin.
>>
>

Custom assembly security

Hi
I have a function that checks if a user is in a Windows domain group. (John
is in Administrator group?). What kind of security permissions is required
to execute my function?
<'')> _
Public Shared Function UserIsInGroup(ByVal Group As String) As String
Dim currentIdentity As WindowsIdentity = WindowsIdentity.GetCurrent()
......
End Function
Thanks
AndresAs outlined on MSDN, the GetCurrent() call requires security permissions
with the ControlPrincipal flag. See also:
*
http://msdn.microsoft.com/library/en-us/cpref/html/frlrfSystemSecurityPrincipalWindowsIdentityClassGetCurrentTopic.asp
*
http://msdn.microsoft.com/library/en-us/cpref/html/frlrfSystemSecurityPermissionsSecurityPermissionFlagClassTopic.asp
Embedded code in a report has ExecutionOnly permission (open
rssrvpolicy.config and search for the CodeGroup with the
name="Report_Expressions_Default_Permissions").
You might consider one of these:
* move the code into a custom assembly, give the custom assembly the
required permissions and assert(!) the permission in the custom assembly
methods prior to invoking .GetCurrent().
* or give the CodeGroup for report expressions more default permissions
(which is not recommended).
However, before modifying any configuration files and security permissions I
recommend to backup your current config files and read the MSDN article
about code security in RS:
http://msdn.microsoft.com/library/?url=/library/en-us/dnsql2k/html/dngrfCodeAccessSecurityInSQLServer2000ReportingServices.asp
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"afontan" <andres.fontan@.alcuadrado.com> wrote in message
news:eiAsm6PeEHA.2812@.tk2msftngp13.phx.gbl...
> Hi
> I have a function that checks if a user is in a Windows domain group.
(John
> is in Administrator group?). What kind of security permissions is required
> to execute my function?
> <'')> _
> Public Shared Function UserIsInGroup(ByVal Group As String) As String
> Dim currentIdentity As WindowsIdentity = WindowsIdentity.GetCurrent()
> ......
> End Function
> Thanks
> Andres
>