HI
I have a question and I have seen a couple similar ones but nothing definitive on the topic of permissions/security for Project server 2013 (in project server security mode) for either Excel(Odata) reports or for SSRS reports.
Even setting security aside the Out of the box configuration is certainly not elegant or even usable.
Situation:
In PWA project managers and team members can only see projects they, own, are team members on, or have been granted permissions explicitly to. (Pretty standard - is using security templates and "my Projects"). We are using secure store and impersonation for access to reports. We do have report authors groups.
As an example a PM needs to create a weekly status report but should not have to pull all the data back to then filter for their one project.
However, when a PM goes to either SSRS or Excel using oData they can see every project in the company. This is just does not make a lot of sense. Why would I hit the database for 100projects when I only care about one and yet there seems to be a lack of information on the topic. In contacting Microsoft we were told there was nothing we could do that is how it was designed.
REALLY???? (see above)
What we have come up for our approach is that we're currently using the UserID value to set parameters in our data sources, but are looking for more 'elegant' approaches to security (if they exist) as there are some liabilities with this approach (EX is a report author forgets to put the parameter in the users will get everything back.
QUESTION:If there is not another approach then we will stay with it. We can't imagine there isn't a better way.
Additionally, the Project user view only contains the identity of the project owner not the rest of the team members (including sponsors who might need to see the data.) so where are they in the database?
Tasks