locked
How to encrypt SSRS action parameters RRS feed

  • Question

  • Hi,

    We use the expression based connection string option in SSRS for our reports. In one of our reports we have a drill down to detail functionality.

    As we are using the expression based connection string , we are passing the connection string to the drill down report via the action parameters. Now when we export the parent report (from which we are drilling down to the detail) to excel, on mouse hover of the drill down field the connection information is visible to the users. This is a serious security issue. Is there any way to disable this during export or encrypt the action parameters.

    Thanks,

    Abdul.

    Wednesday, September 12, 2012 12:51 PM

Answers

  • Hi Abdul,

    From your description, you are using the drillthrough feature other than the drilldown feature. When exporting a report to Excel format, the drillthrough links that appear in text boxes are rendered as Excel hyperlinks in the cell in which the text is rendered. This is by design.

    To work around the issue, if you use SQL Server 2008 R2 Reporting Services or higher, we can disable the drillthrough links when exporting to Excel format. To remove the hyperlink tooltip in the exported Excel file, we would better use the "Go to URL" instead of "Go to report". For example, let's assume the original "Go to Report" expression like below:

    ="http://ServerName/reportserver?/Reports/DetailsReport&rs:Command=Render&Year="&Fields!Year.Value

    Then, we can modify the expression as follows:

    =IIf(Globals!RenderFormat.Name="EXCEL",Nothing,"http://ServerName/reportserver?/Reports/DetailsReport&rs:Command=Render&Year="&Fields!Year.Value)

    References:

    Regards,
    Mike Yin

    TechNet Subscriber Support
    If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.


    Mike Yin

    TechNet Community Support

    • Marked as answer by Mike Yin Thursday, September 20, 2012 5:16 PM
    Friday, September 14, 2012 2:46 PM