Protect BIRT's report

后端 未结 2 615
粉色の甜心
粉色の甜心 2020-12-21 23:06

I can prevent users opening BIRT report from website that I built. But considering the report\'s link still in browser\'s history, any user from this computer still able to

2条回答
  •  醉梦人生
    2020-12-21 23:22

    The easiest way to use a password parameter.

    select 
    
    
    Where 'password' = ?
    

    Use a text box parameter, and when the user runs the report they enter "password" in the text box or the SQL does not return results.

    SQL is not case sensitive so, your password would not be case sensitive. Also this is a very low security measure. It is only appropriate to prevent casual access.

    JavaScript is case sensitive, so you could write something (like a filter on the query) where your Pa$$worD is in a JavaScrip variable and compare to that for case sensitivity.

    Open source BIRT is not intended to provide "Secure" access to data. If you must provide real security of the data, you need to do it before the client has access to BIRT.

提交回复
热议问题