MessageStats 7.8 - Reports User Guide

Table 14. Security roles and associated actions.
Action	User	Author	Administrator
Accessing the site
Exporting reports
Saving report settings in My Reports folder
Saving report settings in any folder
Creating Custom Reports
Saving Custom Reports in My Reports folder
Saving Custom Reports in any folder
Creating new folders in My Reports folder
Creating new folders in any folder
Copy folders or report within My Reports folder
Copy folders or reports to and within My Reports folder
Copy folders or reports to and within any folder
Move folders or reports within My Reports folder
Move folders or reports from any folder to My Reports folder
Move folder to and within any folder
Rename folders or reports in My Reports folder
Rename folders or report in any folder
Delete folders or reports in My Reports folder
Delete folders or reports in any folder
Edit folder descriptions in My Reports folder
Edit folder descriptions in any folder
Enable subscriptions for reports in My Reports folder
Enable subscriptions for reports in any folder
Set Filter Defaults

File-System Based Security

In addition to the Web Report security roles, you can set an additional level of security using a file-based permissions scheme. At minimum, the role-based security scheme allows all roles to view all reports.

Alternately, a file-based permission scheme can restrict the available reports to some users. Explicit permissions are applied on a per-group or per-user basis, and assigned to individual files, folders, and reports. You can configure the settings so that different groups, such as executive management, the help desk, and Exchange administrators can see different report nodes and reports.

You can create more sophisticated security schemes by modifying the file permissions for reports and folders in the file system on the web server. Report files and folders are normally located in the following path: c:\inetpub\wwwroot\MessageStatsReports\Reports.

By restricting the reports that are available to all users, you can protect sensitive analytical data from users that do not require that information.

Users connecting through a web browser see only report files and folders for which they have read access permissions, and folders for which they have list permissions in the file system.

Security Scenarios

Though permission-based security provides more detailed control than role-based security, it requires action on an administrator’s part. MessageStats does not provide the functionality to manipulate the permissions on files and folders. You must use native Microsoft tools to create the Windows NTFS security changes.

Refer to Microsoft Windows native tools procedures for more detailed information about implementing NTFS security scenarios.

Table 15. Possible security implementations.
Implementation	Details
Restricting access to standard report folders	Using native Microsoft Windows tools, remove the Web Reports Administrators, Authors, and Users roles from the folder you want to restrict. Create new security groups and add the members to those groups. Add your newly-created security groups and their access rights to the report folder you want to restrict.
Restricting access to newly-created report folders	Create a new report folder in the treeview. For more information, see File Menu Commands . Using native Microsoft Windows tools, remove the Web Reports Administrators, Authors, and Users roles from the folder you want to restrict. Create new security groups and add the members to those groups. Add your newly-created security groups and their access rights to the report folder you want to restrict.
Restricting access to individual standard reports	Using native Microsoft Windows tools, remove the Web Reports Administrators, Authors, and Users roles from the report you want to restrict. Create new security groups and add the members to those groups. Add your newly-created security groups and their access rights to the report you want to restrict.
Restricting access to individual Custom Reports	Create a Custom Report. For more information, see Creating Custom Reports . Using native Microsoft Windows tools, remove the Web Reports Administrators, Authors, and Users roles from the report you want to restrict. Create new security groups and add the members to those groups. Add your newly-created security groups and their access rights to the report you want to restrict.