Announcement

Migration of this forum

Dear users of this forum,

we are pleased to inform you that we will be updating the software behind this forum in the near future.

Existing posts, users and categories will remain untouched.

Important:

  • Each user will need to reset their password.
  • Please select "I forgot my password".
  • Enter the email address you used to register in this forum.
  • You will receive an email with a link to set a new password.
  • Please choose a new (secure) password and confirm the process.

We will keep you informed in the pinned thread.

Kind regards,
Your ReportServer Team

Migration des Forums

Liebe Nutzer dieses Forums,

wir freuen uns, euch mitteilen zu können, dass wir in naher Zukunft die Software hinter diesem Forum aktualisieren werden.

Existierende Beiträge, Nutzer und Kategorien bleiben weiterhin bestehen!

Wichtig:

  • Jeder Nutzer muss sein Passwort neu vergeben.
  • Wählt dazu einfach "Ich habe mein Passwort vergessen".
  • Gebt die E-Mail-Adresse ein, mit der ihr registriert seid.
  • Ihr erhaltet eine E-Mail mit einem Link zur Passwortvergabe.
  • Bitte wählt ein neues (sicheres) Passwort und bestätigt den Vorgang.

Wir halten euch im angepinnten Beitrag auf dem Laufenden!

Mit vielen Grüßen
Euer ReportServer Team

Pages: 1

#1 2019-03-25 02:38:14

aditi.raiter
Member
Registered: 2018-05-01

URL Reports

Hi

Report Server has generated a std url with username and password on a specific report with the format :

http://SERVER:PORT/reportserverbasedir/reportserver/httpauthexport?id=5000&user=exportuser&apikey=79PKXGScP8r8&format=HTML&download=false

This has caused a security concern since anybody outside the company network could see the data.

What is the recommended solution for exposing internal website to external users? Can the behavior be changed so that when I type the above url, the system would still mandate me to login to the application.

Thanks
Aditi

Offline

#2 2019-03-25 07:57:36

IF_Eduardo
Administrator
Registered: 2016-11-01
Website

Re: URL Reports

Hi Aditi,

the APIKEY is used for bypassing user login together with httpauthexport. The APIKEY should be known only to users being able to open the report exported.

If you need reportserver login, you can use reportexport instead of httpauthexport. More details here: https://reportserver.net/en/guides/admi … a-the-URL/

Regards,
Eduardo

Offline

#3 2019-09-05 13:59:35

aditi.raiter
Member
Registered: 2018-05-01

Re: URL Reports

Thanks!

Offline

Pages: 1

Board footer

Powered by FluxBB