Recently I was working with an instance of SQL Server Reporting Services 2008 R2 and noticed that when logged in using an account that is a member of the Browser Role, that there are some drop down menu items available on Report folders, Reports that were showing the following options being available for me to do:
- Move
- Delete
- Security
- Manage
I was then thinking hang on, as a member of the Browser role I should have very limited permissions. According to the Browser Role Definition I should only be able to do the following tasks:
- View Reports (Run a report and view the report properties)
- View Resources (View resources and resource properties)
- View Folders (View folder contents and navigate the folder hierarchy)
- View Models (View models in the folder hierarchy, use models as data sources for a report and run unique queries against the model to retrieve data)
- Manage individual subscriptions (Create, view, modify and delete user-owned subscriptions to reports and linked reports, and create schedules in support of those subscriptions)
With the above permissions available to the Browser Role, how am I getting these drop down options?
Doing a test of the permissions associated with an account that is a member of the Browser role proved that the permissions are correct and the user account does in fact not have the ability to delete a folder or a report. So how is this menu option available for me to see? This is a known bug in SSRS 2008 R2 and has a connect item – (http://connect.microsoft.com/SQLServer/feedback/details/642329/remove-drop-down-options-in-ssrs-2008-r2-report-site) , So do not be concerned that your end users are able to perform these tasks.
Happy reporting.
Leave a Reply