250a29646cb7dde9715e00dee7248ba7a3bd6d48
Integration/Security.md
| ... | ... | @@ -7,10 +7,10 @@ Izenda Reports fully integrates with the security of existing ASP.NET applicatio |
| 7 | 7 | Type of security|Example|Implementation Details |
| 8 | 8 | ----------------|-------|---------------------- |
| 9 | 9 | [Login](#Login-Security) |Users must login before gaining access to reports.|[[RequireLogin]] [[CurrentUserName]] [[CurrentUserIsAdmin]] [[Your Login Page Integration]] |
| 10 | -[Data Sources](#DataSources)|A specific user can only see certain data sources.|[[RequireLogin]] [[Basic Report Sharing]] [[VisibleDataSource]] [[Database Security]] |
|
| 11 | -[User Driven Report Sharing](#ReportSharing)|A user can save a report and decide if they want other users to see this report. They can also mark a report read-only meaning it can be viewed but not saved over.|[[Basic Report Sharing]] [[CurrentUserIsAdmin]] [[ReportsPath]] [[Read-Only & Shared Checkboxes]] |
|
| 10 | +[Data Sources](#Data-Sources)|A specific user can only see certain data sources.|[[RequireLogin]] [[Basic Report Sharing]] [[VisibleDataSource]] [[Database Security]] |
|
| 11 | +[User Driven Report Sharing](#User-Driven-Report-Sharing)|A user can save a report and decide if they want other users to see this report. They can also mark a report read-only meaning it can be viewed but not saved over.|[[Basic Report Sharing]] [[CurrentUserIsAdmin]] [[ReportsPath]] [[Read-Only & Shared Checkboxes]] |
|
| 12 | 12 | [Custom Report Control](#ReportControl)|Different departments can see different base reports.|[[VisibleDataSources hides reports for non-accessible datasources]] [[ReportsList may be overridden]] [[Storing Reports]] [[ReportsPath]] |
| 13 | -[Overwriting and Deleting Reports](#DeletingReports)|Users can load shared or base reports, but should not be able to delete them or overwrite them.|[[AllowOverwritingReports]] [[AllowDeletingReports]] [[CurrentUserIsAdmin]] |
|
| 13 | +[Overwriting and Deleting Reports](#Overwriting-and-Deleting-Reports)|Users can load shared or base reports, but should not be able to delete them or overwrite them.|[[AllowOverwritingReports]] [[AllowDeletingReports]] [[CurrentUserIsAdmin]] |
|
| 14 | 14 | [Altering Capabilities by Role](#AlteringCapabilities)|Only power users should see the modify report button on the report viewer. Others will only access the report viewer.|[[ShowDesignLinks]] [[ShowModifyButton]] [[AllowOverwritingReports]] [[ShowAdminButton]] |
| 15 | 15 | [Field/Record or Tenant Level Security](#TenantSecurity)|Salespeople look at the same report but see different data based on their territory and credentials. In a multi-tenant environment, reports and data for each customer, group, or tenant should be isolated.|[[PreExecuteReportSet - Hidden Filters]] [[ProcessEqualsSelectList]] [[Field & Record Level Security]] |
| 16 | 16 | |
| ... | ... | @@ -34,7 +34,7 @@ The method will need to be called from your login process with the following lin |
| 34 | 34 | Izenda.AdHoc.AdHocSettings.AdHocConfig.PostLogin() |
| 35 | 35 | ``` |
| 36 | 36 | |
| 37 | -###<a name="DataSources"></a>Data Sources |
|
| 37 | +###</a>Data Sources |
|
| 38 | 38 | |
| 39 | 39 | The API allows control over which data sources a user sees based on their credentials. In the following example, members of the "Sales" role would see additional data sources that normal users would not. Any reports that utilize these data sources would only be visible to members of the sales role. |
| 40 | 40 | |
| ... | ... | @@ -56,7 +56,7 @@ The method will need to be called from your login process with the following lin |
| 56 | 56 | Izenda.AdHoc.AdHocSettings.AdHocConfig.PostLogin() |
| 57 | 57 | ``` |
| 58 | 58 | |
| 59 | -###<a name="ReportSharing"></a>User Driven Report Sharing |
|
| 59 | +###User Driven Report Sharing |
|
| 60 | 60 | |
| 61 | 61 | Once the login security is implemented, users can set the shared and read only status of a report. If a report is shared, other members of that tenant will be able to see it. If it is marked read-only, users will be able to load the report, but any modifications will need to be saved as a different report name. These limitations do not apply to users with admin rights enabled via CurrentUserIsAdmin. |
| 62 | 62 | |
| ... | ... | @@ -80,7 +80,7 @@ public override Izenda.AdHoc.ReportInfo[] ListReports() |
| 80 | 80 | { Return filtered list} |
| 81 | 81 | ``` |
| 82 | 82 | |
| 83 | -###<a name="DeletingReports">Overwriting and Deleting Reports</a> |
|
| 83 | +###Overwriting and Deleting Reports</a> |
|
| 84 | 84 | |
| 85 | 85 | The API allows control of deleting or modifying reports. Reports can be accessed as Read-Only and can not be modified or deleted. |
| 86 | 86 |