Access to Report Manager is Wide Open
I have SSRS 2005 deployed on a Windows 2003 machine. I'm accessing the report manager like http://servername/reports/Pages/Folder.aspx. The problem is that this link gives access to everything on Report Manager to people who do not have network access to the machine itself. I'm trying to set up folder security on the report manager but can't because something is allowing just about anyone to access everything on the Report Manager. Where do I start looking to resolve this?Lee Markum
July 22nd, 2011 3:35pm

A first emergency measure would be restricting access to the Report Manager web application only to specific ips, until you find a way to restrict it. Go to the default web site and find the Reports virtual directory. Properties->Directory Security->IP address and domain name restrictions. Add the ip addresses you want to be able to access Report Manager. But this is only for starts. Then you have to check the rest of security settings of this virtual directory. Make sure no Anonymous access is allowed. Then open Report Manager. In the right top corner you will see a link Site Settings. In Site Settings there is security. Start there. If only administrators are allowed to administer and still anyone can see Site Settings (for example) then check to see who are defined as administrators of the machine/domain. Good Luck. 1+1 = 3 for large values of 1
Free Windows Admin Tool Kit Click here and download it now
July 22nd, 2011 3:51pm

Hello Lee, You can define Folder level security by doing "Folder Settings -->> Security tab" Are you looking for the same? If I misunderstood your req. please description in detail. Thanks KumarPlease do let us know your feedback. Thank You - KG, MCTS
July 22nd, 2011 3:51pm

Kumar, when I do that and then connect to the Report Manager as a Windows User who is supposed to have access only to that certain folder I am seeing everything on the Report Manager.Lee Markum
Free Windows Admin Tool Kit Click here and download it now
July 22nd, 2011 4:03pm

Lee I believe folder security is not the way to go. Reporting services have role based authorization that you can define from within the Report Manager. I wouldn't play with report manager's folder security if I were you. :-)1+1 = 3 for large values of 1
July 22nd, 2011 4:19pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics