Using page-level security
Using the iHub Report Server Security Extension (RSSE) framework, a developer can create an RSSE service that manages page-level security in a BIRT design by retrieving a user access control list (ACL) externally.
By default, when a secure report asks for the ACL of a user, the Encyclopedia volume returns a list that includes the user ID and the roles in which the user is a member. Frequently, the information in BIRT iHub security does not match the information in a database used by a secure design. An RSSE page security application can translate a BIRT iHub ACL to a design-specific ACL.
How to install the Java RSSE page-level security application
BIRT iHub Integration Technology contains an example of how external page‑level security works using Java RSSE in the subdirectory, Page_Security_Example. For information about BIRT page‑level security, see the Actuate BIRT documentation.
To install the page-level security sample application on BIRT iHub, deploy an external ACL file with the application. Perform this operation before enabling the web service.
To include the ACL file provided with the sample application in the build, perform the following operations:
1 Copy the file, user.acls, located in the Page_Security_Example directory to the following location:
/com/actuate11/rsse/aclSample
2 Using a source code editor, in Page_Security_Example directory, open the file, build.xml, and perform the following operations:
1 In build.xml, navigate to the buildACL element specifying the contents of the file, rsseAcl.jar.
2 Modify the fileset list to contain the following line of code:
<include name="com/**/*.acls" />
The buildACL element looks like the following example:
<target name="buildACL" depends="buildACL.clean, compileACL">
<mkdir dir="lib"/>
<jar jarfile="lib/rsseAcl.jar">
<fileset dir=".">
<include name="com/**/*.class" />
<include name="com/**/*.properties" />
<include name="com/**/*.acls" />
</fileset>
</jar>
</target>
3 Build the application using the Apache Ant tool.
For more information about building a Java RSSE application using Apache Ant, see How to build a Java RSSE sample application.
4 Copy the file, rsseAcl.jar, to the lib directory of the BIRT iHub servlet container and configure the class.properties file.
For more information about copying the archive file for a Java RSSE application to the lib directory for the BIRT iHub servlet container and configuring the class.properties file, see How to install a Java RSSE application.
5 Configure the open security as a web service.
For more information about enabling an RSSE application to run as a web service, see How to configure an RSSE SOAP Service.