Limit a user to execute specific custom Jaspersoft reports

Products

• Clarity PPM SaaS
• Clarity PPM On Premise

Issue/Introduction

How can you restrict a user to be able to only see and execute only specific custom Jaspersoft reports?

Environment

Release: Any

Resolution

A possible way to achieve this is by placing the reports in a custom folder and configuring the user accordingly.

1. Add a custom role under Home - Advanced Reporting - Manage - Roles.
2. Add a custom folder under Home - Advanced Reporting - View - Repository, i.e. under the Organization.
3. Right-click on the custom folder and select Permissions to assign "Read Only" permission to the custom role.
4. The user to execute the reports needs to have assigned both the ROLE_USER and the Custom Role roles.
   1. ROLE_USER:
      1. In Clarity, go to Administration -> Organization and Access -> Resources
      2. Select the resource
      3. In Resource's Access Rights - Global add: "Advanced   Reporting - Navigate"
   2. Custom Role
      1. In Clarity, go to Home -> Advanced Reporting -> Manage -> Users
      2. Edit the User.
      3. Add the Custom Role
      4. Click on Save.
   3. Run the "Create and Update Jaspersoft Users"
   4. In the custom folder, right-click on the report - Permission and assign "Read Only"  permission to both the Custom Role and the ROLE_USER roles
   5. The user can now correctly see only the custom folder and the reports in there, but note that on executing a report an error may show up:
      
      org.springframework.security.access.AccessDeniedException: Access is denied
      To execute a report you need access to the Data Sources and not having this is causing the "Access is denied" message. The data sources can be found in the Repository under the default "CA PPM" folder in the "Data Sources" subfolder. To resolve this error, grant the "Execute Only" access to the "CA PPM" folder for the custom role
      1. Right-click on the "CA PPM" folder
      2. Select permissions.