Author Topic: Securing CiviReports (Read 4792 times)

sratay · October 04, 2007, 07:18:14 am

What is the recommended approach for securing CiviReports that are built using BIRT? Ideally there would be a way to integrate the existing Civi security model for securing the reports. If BIRT is the standard reporting solution, there should be some way to leverage the existing security information so that a separate database of users and roles does not have to be created in order to securely roll out reporting. Has anyone completed such an integration already? Is there already some integration that's part of the product that I might not be aware of?

Thanks!

Steve

Donald Lobo · October 04, 2007, 01:37:24 pm

Our current integration with BIRT is quite minimal. Its basically more of "here are some example reports". Linking from BIRT reports to CiviCRM records is easily done (and there are examples for this)

I think it would be great for future versions of CiviCRM to have tighter integration with BIRT. A few thoughts

Embed links to BIRT reports in CiviCRM. These pages can follow CiviCRM access control policy. I suspect you can also wrap a BIRT report in a CiviCRM page using iframe or similar techniques

Use CiviCRM api's to determine who has access to what report. I suspect this will need to add a custom java library that integrates with BIRT and uses the CiviCRM API. We will need to add the ACL calls to CiviCRM API

lobo

CiviCRM Community Forums (archive)

News:

Author Topic: Securing CiviReports (Read 4792 times)

sratay

Securing CiviReports

Donald Lobo

Re: Securing CiviReports