none
account issues - invoke file through ssrs hyperlink RRS feed

  • Question

  • hi there - i have a hyperlink in one of the columns (in tablix) in an ssrs report which points to some server where a dump of documents reside..the hyperlink is appended with a doc_id which helps locate that doc and to invoke it from that server..now this works fine if the ssrs report runs with the current windows logged in user and when the same logged in user is also set up beforehand on that document server where the ssrs hyperlink points to..and this was in dev env..

    going ahead in a controlled env, there would only be one system a/c which will be set up on that doc server and regardless of who the logged in windows user is who runs the report; access to the docs on that doc server will only be given to that sys a/c..so i passed this same sys a/c (which is set up on that doc server) in the data source in report mgr --> credentials stored securely in report server..and thought that these credentials will be picked while navigating to that doc server and the doc would be opened..but this doesn't seem to happen and it doesn't invoke the document...says invalid credentials..so i think it's picking my logged in credentials here and not the ones of the sys a/c that i entered in data source...(pls note here, the doc server url doesn't contain the report server / report manager url components..it's a different url and is used to only open the doc..so i don't think i can pass user credentials to that url like &dsu:Datasourcename=username&dsp:Datasourcename=password..may be i am wrong and i can pass? but don't think that's secure even if it's an option?)

    alternatively, i thought this could be achieved by changing the execution account to this system a/c, under reporting services config mgr..but then we only have ssrs client tools installed..so can't change server settings..and just for this one requirement, nobody would accept my request to change the execution account...also don't know if changing exec account is even a solution for this?

    i hope the question is clear..please give some work arounds..i'm stumped and not getting required help anywhere..

    note: as another work around, i asked if a group can be set up on that doc server..and when all the users accessing the report are added to the group, they can open the doc after navigating from ssrs report...but the idea giving access to a group was rejected...they can only give access to this sys a/c... 



    • Edited by sqlprof Saturday, December 13, 2014 12:36 PM
    Friday, December 12, 2014 6:06 PM

Answers

  • Hi sqlprof,

    Based on my understanding, you create a report in a server and add a URL in Go to URL option for a file which exists in doc server. When clicking the corresponding text box, you want to open the file, right?

    In Reporting Services, when adding a hyperlink to a URL using Go to URL option, if we click the corresponding text box, it will send a http request to server side, the permission to access the specified URL is only based on the current user account, it’s not related to Reporting Services itself. So  regarding the stored credentials, it’s used to connect external data source when retrieving data, the doc server will not take reference to this stored credential when receiving access request. And since we just open a URL to access the file, changing the execution account will not work because the file content is not referenced in report.

    In this scenario, if you want to open the files on doc server through SSRS report, the current user running report must have permission to access the files on doc server. This is the only way to achieve your goal.

    Reference:
    Add a Hyperlink to a URL (Report Builder and SSRS)
    Store Credentials in a Reporting Services Data Source
    Execution Account (SSRS Native Mode)

    If you have any question, please feel free to ask.

    Best regards,
    Qiuyun Yu

    • Marked as answer by sqlprof Monday, December 15, 2014 6:54 PM
    Monday, December 15, 2014 2:41 PM
    Moderator

All replies

  • hi there members - can anyone please respond to my question..

    if someone even knows of any blog/article etc on how we can pass username/pwd as parameters in a url, it will be really helpful to me..the target link that navigates to from that hyperlink isn't a ssrs report though, and therefore that link won't be like the reportserver one..and so i can't pass the parameters in this format - &dsu:Datasourcename=username&dsp:Datasourcename=password..it's the general http url, but is a network location..

    any kind of help please on this will be really helpful..

    Monday, December 15, 2014 11:08 AM
  • Hi sqlprof,

    Based on my understanding, you create a report in a server and add a URL in Go to URL option for a file which exists in doc server. When clicking the corresponding text box, you want to open the file, right?

    In Reporting Services, when adding a hyperlink to a URL using Go to URL option, if we click the corresponding text box, it will send a http request to server side, the permission to access the specified URL is only based on the current user account, it’s not related to Reporting Services itself. So  regarding the stored credentials, it’s used to connect external data source when retrieving data, the doc server will not take reference to this stored credential when receiving access request. And since we just open a URL to access the file, changing the execution account will not work because the file content is not referenced in report.

    In this scenario, if you want to open the files on doc server through SSRS report, the current user running report must have permission to access the files on doc server. This is the only way to achieve your goal.

    Reference:
    Add a Hyperlink to a URL (Report Builder and SSRS)
    Store Credentials in a Reporting Services Data Source
    Execution Account (SSRS Native Mode)

    If you have any question, please feel free to ask.

    Best regards,
    Qiuyun Yu

    • Marked as answer by sqlprof Monday, December 15, 2014 6:54 PM
    Monday, December 15, 2014 2:41 PM
    Moderator
  • thanks v much Qiuyun for replying..

    yes, you're correct - on clicking the corresponding text box the file opens up..

    so based on all your explanation :

    stored credentials won't work - fine..
    changing execution a/c won't work - fine..

    also, since the current user running the report isn't set up in the doc server (it's just the system a/c that's set up there), the doc doesn't open for the current user...

    now it seems that getting a group the required access on the doc server (and adding required users to that group) remains a final option...even i thought of resorting to this option, but somehow the team who does it is saying that they can't provide a group the required access...it's only individual accounts that they can deal with..then i think i'll have to get all the individual users set up on that doc server with the required permissions...hope this gets sorted...

    thank you for the references provided as well..

    kind regards..

    Monday, December 15, 2014 6:53 PM