Implementing data level security on Pentaho's reports

[ugaurav]

My requirement is as follows:
Authenticated users in my system are supposed to see a restricted set of data. A Manager role user, can see data only from his location. He does not have access to data from another location.

To implement this, I have a database level procedure to set the appropriate user in the context (using Oracle's VPD facility).

I need to get my database procedure invoked from the Pentaho BI.

I plan to modify the DataSource class and DataSourceFactory class so that I can invoke the procedure just after invoking the getConnection method.

I have 2 issues here:
1. The JNDI definition in database has no way to define a DataSourceFactory class
2. The JNDI definition in web.xml and context.xml is not being read/recognized/used by Pentaho BI

Can someone please suggest.

Thanks in advance.

PS: I am using - Pentaho CE 4.5-GA, Tomcat 6.0

[martin.novoty]

My requirement is as follows:
Authenticated users in my system are supposed to see a restricted set of data. A Manager role user, can see data only from his location. He does not have access to data from another location.

To implement this, I have a database level procedure to set the appropriate user in the context (using Oracle's VPD facility).

I need to get my database procedure invoked from the Pentaho BI.

I plan to modify the DataSource class and DataSourceFactory class so that I can invoke the procedure just after invoking the getConnection method.

I have 2 issues here:
1. The JNDI definition in database has no way to define a DataSourceFactory class
2. The JNDI definition in web.xml and context.xml is not being read/recognized/used by Pentaho BI

Can someone please suggest.

Thanks in advance.

PS: I am using - Pentaho CE 4.5-GA, Tomcat 6.0

Hi, I am researching same problem, is there somebody who has resolved?
I believe the road leads through solution as in this link:

https://community.jboss.org/wiki/Int...cleVPDandJBoss

Would be great, if somebody would share his results ...

BRs,
M.

[rhaces]

2. The JNDI definition in web.xml and context.xml is not being read/recognized/used by Pentaho BI

There should be no problem configuring the JNDI through web.xml and context.xml. Follow the step by step from the link: http://infocenter.pentaho.com/help/i...ta_source.html

Personally I would suggest instead of creating the connection in tomcat/conf/context.xml you create it directly under tomcat/webapps/pentaho/META-INF/context.xml. Also an important thing to do is, after you stop the BI Server, delete the folder tomcat/conf/Catalina and then start the server with the new configurations.