I am working with SQL Reporting Services 2008 R2 and have set permissions on the site and folder so that users can only see particular folders, data sources, etc. when browsing the Reporting Services site via a web browser. However if I give access to Report Builder, I find that when the user opens Report Builder and browses for a Data Source or browses for a report to open that the user can see all files and folders which exist on the Reporting Services server. On the folders / reports / data sources I do not want to be seen I have tried checking the "Hide in tile view" option but the users can still see them in the various Browse, Open, Save dialogs within Report Builder. Is there any way to control which folders are seen when browsing a Reporting Services site via the Report Builder? Thanks, Steve

Hi stevep0, According to your description, you would like to control folders show or hide when browsing a Reporting Services site via the Report Builder. Through my in-depth investigation, this behavior is actually by design at this point. Because there is no other way in report builder to view hidden folders if desired (similar to using Detail view in Report Manager), report builder shows them by default. I would like to suggest a workaround for this specific issue, in general, create different folders for different users and give permissions accordingly. More details please refer to following steps of my sample. 1. Create a folder named Reports on the report manager. 2. Grant user “Report Builder” permission under “Folder Settings” on the Home page. 3. Click the Reports folder which has created previously, select “Security”. 4. Grant user “Report Builder” permission also. After you complete steps above, when users are browsing Reporting Services sites via Report Builder, they can open the Reports folder only and cannot see other folders and resources. For more details, please see, Tutorial: Setting Permissions in Reporting Services: http://msdn.microsoft.com/en-us/library/aa337491(v=SQL.105).aspx This is a workaround for the specific issue that you raised. Anyway, I would suggest you submit a feedback at http://connect.microsoft.com. Connect site is a connection point between you and Microsoft, and ultimately the larger community. Your feedback enables Microsoft to make software and services the best that they can be, and you can learn about and contribute to exciting projects. Appreciate your understanding. If you have any question, please feel free to ask. Thanks, Eileen Zhao

Eileen, Thank you for the response. I followed the steps in the sample you provided, however, if I do not go to "Site Settings" in Report Manager and assign a system role which has at least "Execute report definitions" permission to the user, then they cannot see the Report Builder icon at all. With that in mind I assigned a system role with only the "Execute report definitions" permission and then followed the rest of the steps you had provided. Even when doing that, in Report Builder the user is still able to see folders, data sources etc. that they do not have permission to in Report Manager. It seems like permissions set in Report Manager do not carry over to Report Builder. Thanks, Steve

Hi stevep, All you have mentioned seems to be fine, I am sorry for missing the steps to assign users' permission in Site Settings. Another thing I would like to confirm is that have you removed user's permission on folders which should not be viewable to those users? Usually, the permissions added to parent folder will be inherited to all subfolders and files. Once we grant the user to access the parent folder, that is to say, the user also has been granted to access its subfolders and files. So when you grant user permission in “Folder Settings”, the user will have inherited permission on all folders in the report server hierarchy. In that case, we need to remove user permission from folders to make sure those things would not be showed to users. If you have any question, please feel free to ask. Thanks, Eileen Zhao

Hi Eileen, I wanted to follow up on this case anyone else was having the same issue. Your instructions are correct and I was able to apply permissions to folders, data sources, etc. When accessing the SQL Server Reporting Services website I was being prompted for credentials and I would enter user credentials for a user I had setup with restricted SSRS permissions and I was only able to see folders, data sources, etc. which I had assigned that user permission to. I would then open Report Builder using the "Report Builder" button and within Report Builder I was able to see all folders, all data sources, etc. which existed on the SSRS server. What I did not realize is that rather than using the credentials I had entered when logging in to the Reporting Services website (the credentials for the user with restricted SSRS permissions), the Report Builder was running using the credentials of the user that I had logged in to Windows with and my Windows user had permission to see all folders in SSRS. This is why it seemed as if the instructions you had provided were not working, when in fact they were, it was just that Report Builder was running under my Windows user credentials which had permissions to see all objects in SSRS. If anyone runs into a similar issue they can run Report Builder under different user credentials by going to Control Panel, opening User Accounts, accessing the user account they are logged in to Windows as and click "Manage my network passwords". Here they can add a server and user credentials that should be associated with it. Thanks again for your assistance. -Steve