?
Solved

SSRS Security for domain users (troubleshooting question)

Posted on 2008-11-06
7
Medium Priority
?
1,855 Views
Last Modified: 2012-05-05
I am having trouble granting access for domain users group in SSRS.
Currently, only local or domain admins can view reports at http://server/reports
Domain users get the proper home page, with no folders.

This is a windows 2008 server. The sql server is hosted locally. The sql server is running on a domain account. The web server is IIS7. Both the "Reports" website and the "ReportServer" web service are running on a common app pool, which has a basic domain user identity.

The system-wide security settings defines "domain users" and "everyone" as a "system user" role.
The root folder of the reports web site has "domain users" and "everyone" as "browser".

I have tried restarting IIS, and still, the only users to can see reports and folders are admin-level users.
What am I missing here?
Thanks in advance
0
Comment
Question by:rocksanddirt
  • 4
  • 3
7 Comments
 
LVL 12

Expert Comment

by:jgv
ID: 22897870
The reports and folders should inherit the security set on the root folder. Have you checked one of the folders to confirm that it inherited all accounts/groups? Try creating a new folder to see if it picks up the permissions properly. Also make sure that you have qualified the account groups with the domain name (ie: YourDomainName\Domain Users).
0
 

Author Comment

by:rocksanddirt
ID: 22901368
here are the security permissions on the root folder:
---------------------------------------------
BUILTIN\Administrators Content Manager
Everyone Browser
[DOMAIN]\domain users Browser
---------------------------------------------
Browser role have the view models, folders, reports and resources as well as manage individual subscriptions. This is the default settings.
---------------------------------------------
here are the system role assignments:
BUILTIN\Administrators System Administrator
Domain Users System User
everyone System User

I tried making a new folder, but once again as a domain user when i navigate to:
http://localhost/reports/
The home directory appears, but is empty.

BTW when you are typing in usernames, SSRS validates the username, so I know the user names are correct
0
 
LVL 12

Expert Comment

by:jgv
ID: 22903979
Hard to tell if this is a SSRS problem or Win2008 problem. Have a look at this article to see if it has anything useful.
http://www.omegaprojex.com/index.php/2008/10/10/ssrs-2005-on-windows-server-2008/
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
LVL 12

Expert Comment

by:jgv
ID: 22904003
One more install and configuration msdn article.
http://msdn.microsoft.com/en-us/library/bb839480(SQL.90).aspx
0
 

Author Comment

by:rocksanddirt
ID: 22904288
jgv--
I used your second article as my guideline for setting up the server.
The fist article talks about how to get the websites up and running in IIS7, which I have already done.
0
 
LVL 12

Expert Comment

by:jgv
ID: 22905784
I haven't used server 2008 with SSRS so can't think of anything else to suggest. Doesn't make much sense that you can get to the root folder but not see any reports or folders. Hopefully someone else has encountered this and can offer a solution...
0
 

Accepted Solution

by:
rocksanddirt earned 0 total points
ID: 22934758
I found out what was going on here: It automatically started working after a few hours.
Even though you have changed the permissions on the SSRS for reports/folders, your changes will not be applied because IIS is caching permission sets.

I thought that pressing the start/stop button on the web site in IIS would be sufficient, but it was not.
I think you need to run as administrator: IISReset.exe
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I recently went through setting up a JasperReports Server using the AWS EC2 instance, and this article will cover some basic administration tasks I had to perform.
In this article I will describe the Backup & Restore method as one possible migration process and I will add the extra tasks needed for an upgrade when and where is applied so it will cover all.
Loops Section Overview
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question