.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
Gaurav Pal
Post New Web Links

Reporting Services Forms Authentication and group permissions

Posted By:      Posted Date: September 28, 2010    Points: 0   Category :Sql Server

Hello all,

I have spent some time getting Forms Authentication working with 2008 (R2) I have one final problem left that is causing intense frustration...

The working bits:

a) Built and tested the required extension - thanks to a combination of old Microsoft example supplemented by the one from chapter 19 of Teo Lachev's book, supplemented by Brian Lawson's book.

b) used existing user/group structures in the db to implement role level permissions

c) Can now grant rights to usernames and the usernames validated against our db, they can log in fine and run reports.

d) Nice customised login screens that login across the application and Reporting Services with a single login - which was the primary aim after all!

e) can grant rights to folders at group level and granting/revoking those rights adds or removes the folders in ReportManager - all looking wonderful

The last hurdle:

If I grant permissions to a specific username (we use email address as the username) then that user can log in to ReportManager fine and see what they should see, so it seems like the bulk of the authentication and authorisation extension logic is OK.

If I grant the exact same permission to a role, and make a login a member of that role (removing the specific username permission) then they

View Complete Post

More Related Resource Links

Need sum only 1 row for hide duplicates rows in a GROUP in Reporting Services

In a report grouped by Collateral Name, I have the same Collateral Amount in multiple rows.  I clicked "hide duplicates" so it only displays once on the report, but it is summing row the Collateral Amount that is sum from a every row that hidden.  Is there a way in RS to only sum the displayed row (or the top row in a group)? As the sample, I had the data as below:  Collateral Name                     Collateral Amount            Outstanding         C-1                                                    100                            20         C-1                                                    100                            15         C-1                                                    100                            30 Now I can show like this with Hide Duplication properties,  Collateral Name                     Collateral Amount            Outstanding         C-1                                                    100                            20                                                                                                    15                                                                                                    30 -----------------------------------------------------------------------------------------                                                                 300                             65 -------------------------

SQL Reporting Service, Cookies and Forms Authentication

Hi, I currently have a instance of SQL Reporting Services that uses custom Forms authentication. When I access the Report Manager through Internet Explorer the Report Manager redirects to my login page, I login and it heads back to the Report Manager and everything works as expected. The problem I'm having is when I use the web service it fails when I call ListItems( ... ). I first create an instance of the service, I then call LogonUser with a username and password, which executes fine, then I call the ListItems which throws an exception similar to: The content type text/html; charset=utf-8 of the response message does not match the content type of the binding (text/xml; charset=utf-8). If using a custom encoder, be sure that the IsContentTypeSupported method is implemented properly. The first 1024 bytes of the response were: '<html>  <head>   <title>    SQL Server Reporting Services   </title><meta name="Generator" content="Microsoft SQL Server Reporting Services 10.50.1600.1" /> <meta name="HTTP Status" content="500" /> <meta name="ProductLocaleID" content="127" /> <meta name="CountryLocaleID" content="1033" /> <meta name="StackTrace" content="   at Microsoft.ReportingServices.

Reporting Services 2008 and Windows Authentication


I have been searching through numerous blogs and MSDN/Technet posts for the answer to this but I can't seem to find anything concrete other than 'do something different.'


What I am attempting to do is setup reporting services to do a double hop when using Windows Authentication back to remote datasources.  Here are the scenarios I am faced with so far;  To the best of my knowledge I have setup the appropriate SPN's for kerberos, the server hosting the application is setup for Delegation, as is the Domain Service Account that RS is running under.  RS is running in native mode, not sharepoint integrated.


1) When the rsreportserver.config file is set to use NTLM a user can authenticate back to the report server and a report will return the USERID for as appropriate user.  When making a connection to a remote datasource it tries to authenticate as NT Authority\Anonymous logon.  obviously I am not going to setup the anon logon as a read only account on the server for security purposes.

The Web.config file for the report server is set to impersonate 'TRUE', when setting to false the reports returns a userid of the service account RS is using, and attempts to connect to the remote datasource as the service account.  There would be no way to filter roles for who is able to

Windows Identity Foundation (Claims Based Authentication) for Reporting Services



I see that SQL Server 2008 R2 Reporting Services now supports Claims Based Authentication in Sharepoint 2010, meaning that end users can authenticate with Sharepoint using Claims Based Authentication, and use the same security tokens to connect through to Reporting Services.

I assume that behind the scenes Sharepoint is using Windows Identity Foundation (WIF - formerly codenamed "Geneva") to handle the authentication, and passing this on to Reporting Services.

I'm keen to use Windows Identity Foundation to authenticate with Reporting Services without Sharepoint. We have an existing ASP.NET web application, and we'd like to call Reporting Services from that, passing on the Windows Identity Foundation credentials of the user logged into our web application.

I've done some work on setting up a custom security extension using Forms Authentication (based on the sample), but am not sure how to proceed from there.

Google/Bing hasn't been helpful. Can you please point me to some guidance on how to set up Windows Identity Foundation authentication for Reporting Services?<

Reporting Services Orphaned Group footer on PDF / Print

Good afternoon

The report I have created using reporting services (VS2005) has a group header which is set to repeat on every new page, and the group footer appears only at the end of the group.

It looks fine in preview mode, and also on the screen, However; when the report is exported to PDF or printed, If the group FOOTER has is pushed onto a new page because of a pagebreak, the group HEADER is not displayed on this new page.

Is there a fix for this?  I have spent hours searching on the web, but have not found a solution.


Can I pass a user's active directory group as a parameter to reporting services?


Hi there,

I am wondering if I can pass a user's active directory group as a parameter to reporting services? If so, how can I do that (e.g. where can I get that group from?)?

Is there something as User.UserID for active directory groups?

Many Thanks and best wishes



SharePoint forms authentication and web services



We have a WSS 3.0 site that uses forms authentication using a custom SQL Server 2000 database. My goal is to log into the site with a Blackberry phone and display list items in small aspx pages formatted for the Blackberry browser.

I'm in that prototyping phase, learning what I can and cannot do with each approach. Initially I wanted to use the SP web services to authenticate and use the resulting cookie in subsequent web service calls. I have not been able to get the authentication web service working yet. My other idea was to use the native mobile login page to authenticate. Then I should be able to use the SP object model to fetch and display lists on other pages.

I saw postings that the SP web services don't work with forms authentication but also saw posts indicating success.

What's the final answer on that one? I'd just as soon avoid unnecessary paths.

Has anyone actually done something like this?

Thanks for the help!


Reporting Services 2005 - Scatter Report Unable to show category group



  I am using scatter chart to create some sort like


Quantity  Time  Machine Name

12 2010-09-10 04:21:11         M1

22 2010-09-10 19:21:11  M1

100 2010-09-11 05:21:11  M1

89 2010-09-11 07:21:11  M1


66 2010-09-12 07:21:11  M2

18 2010-09-13 07:21:11  M2


68  2010-09-12 07:21:11  M3


X-axis show me the quantity, Y-axis shows me the time and then machine name group its time and qty under different category group. How to make it.

I have tried to use scatter chart to display but I can only see the X and Y -axis and without category group shown...  

In reporting services got this error "The permissions granted to user sysname\ASPNET are insufficien



i'm using sql server 2008 with advance services 

the below error is of reporting services..

"The permissions granted to user 'sysname\ASPNET' are insufficient for performing this operation. (rsAccessDenied)"

when i'm trying to host  appliction.. the above error is occured..

it works fine when i try to execute locally.. but when i try to execute through the IIS i.e host application

the above error is displayed.

please help me....

In reporting services got this error "The permissions granted to user sysname\ASPNET are insufficien



i'm using sql server 2008 with advance services 

the below error is of reporting services..

"The permissions granted to user 'sysname\ASPNET' are insufficient for performing this operation. (rsAccessDenied)"

when i'm trying to host  appliction.. the above error is occured..

it works fine when i try to execute locally.. but when i try to execute through the IIS i.e host application

the above error is displayed.

please help me....

Explained: Forms Authentication in ASP.NET

This module explains how forms authentication works in ASP.NET version 2.0. It explains how IIS and ASP.NET authentication work together, and it explains the role and operation of the FormsAuthenticationModule class.

Using Forms Authentication in ASP.NET - Part 1

Classic ASP developers often had to "roll their own" authentication scheme, however, in ASP.NET much of the grunt work has been taken out. This article outlines how things have changed and how FormsAuthentication can be used to secure a Web site with a minimal amount of code.

ASP.NET Forms Authentication - Part 1

Often, in legacy Web applications, users authenticate themselves via a Web form. This Web form submits the user's credentials to business logic that determines their authorization level. Upon successful authentication, the application then submits a ticket in the form of a cookie, albeit a hard cookie or session variable. This ticket contains anything from just a valid session identification access token to customized personalization values.

ASP.NET forms authentication with roles

.A timeout is specified in minutes. This is "time since last request" not the "time since login". If a login is indicated to be persistent (described later) this is ignored.
.A protection method is specified for the cookie.
Next I wanted to specify a folder to which access is restricted to people who have logged in. To do this I entered the following code in the web.config file (beneath

Forms Authentication in ASP.NET

In this tutorial you will learn about Forms Authentication in ASP.NET 2.0 - Forms Authentication class, Cookie Domain, Forms Cookies, The Login Control, Signin, Signout, Authenticate, Redirect, Login Status, Login Name and Login View Controls.

Integrate Reporting Services with Silverlight and RIA Services

One of the most wanted future features in Silverlight is the possibility to create business reports using Reporting Services. In this article, I will show how to use the existing Reporting Services technology with Silverlight and RIA Services combination.

Problems with Forms Authentication in DD 4 site


Hello,  I am seeing a strange problem with Forms Authentication in my DD site.   A user logs into and can view/edit/delete data all day, but when they execute a Custom Filter against data (for example , a control DynamicData/Filters/CustomerLastNameSearch.ascx ) then the site auth fails, and redirects to the log in screen.

in web.config I have

     <authentication mode="Forms">
            <forms name=".Star" loginUrl="~/Login.aspx" protection="All" defaultUrl="~/Default.aspx" path="/" timeout="43200" cookieless="UseCookies" />     

Offhand, I am thinking two things : that DynamicData/Filters path requires some special handling for some reason, or the control extension ascx is causing auth to get confused.   Has anyone else experienced this or have any suggestions?  Thanks!

ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend