As a fully integrated feature of Enterprise Manager, Information Publisher takes advantage of the Enterprise Manager security model. Using the security features of the console, report information can be made available to all Enterprise Manager administrators, selected Enterprise Manager administrators, or made public for non-privileged users to view without having to log into the Enterprise Manger Grid Control console.
Additionally, Information Publisher enforces the target privileges of Enterprise Manager administrators, by ensuring that they have at least View privilege on the targets they include in their reports.
There are two types of report viewers:
1. Enterprise Manager Administrators
Enterprise Manager administrators can create/edit report definitions, generate reports, and share access to report definitions. Super Administrators can access all report definitions.
When a report definition owner grants access to another administrator, the administrator will be able to:
2. Un-authenticated Users
Un-authenticated users can only access report definitions published to the Enterprise Manager Reports Web site. This Web site is set up automatically as part of Enterprise Manager and can be accessed from any web browser without having to log into Enterprise Manager Grid Control. Un-authenticated user access to report definitions can only be granted for those definitions that have specific targets (either implicitly or explicitly) set in the report definition. Report definitions that prompt the user to select targets against which to run the report cannot be made available to non-EM Administrators.
A single system privilege GRANT_ANY_REPORT_VIEWER is required to allow an Enterprise Manager administrator to make a report accessible via the Enterprise Manager Reports Web site. Super Administrators have the GRANT_ANY_REPORT_VIEWER privilege by default.
Reports can either be generated using the target privileges of the report definition owner or the report viewer. The target privileges to use are set at the report definition level.
If the Run report using target privileges of the report owner option is chosen, then the report will rely on the target privileges of the report definition owner and not the report viewer’s targets. This option is only available when the Use the specified target option is also selected. Reports generated on a schedule and reports made available to non-credentialed non-Enterprise Manager administrators must have the Run report using target privileges of the report owner option chosen.
If the A target will be selected by the report viewer when viewing the report option is selected the report is generated with the target privileges of the report viewer. Since the report viewer is able to select the targets in this case, the target list is restricted to targets to which the viewer has access.
Publishing a Report for Public Access
Sending E-mail Reports to Users
Enterprise Manager Information Roadmap
Copyright © 1996, 2007, Oracle. All rights reserved.