Running reports with report owner capabilities
When running a report as the owner, you can use the capabilities granted to the owner of the report, even if you do not have the capability yourself. The owner capabilities that can be granted let you add HTML items in reports, add user-defined SQL, and generate bursted reports.
Before you begin
Before you can run a report as the owner, the report owner must create trusted credentials to authorize you to use their credentials. For more information, see Creating trusted credentials.
About this task
If a report, for example, uses HTML items or user-defined SQL, the corresponding capabilities HTML Items in Report and User Defined SQL are required to run the report. These capabilities are normally granted to a limited set of users, because the potential to create reports with malicious intent using either HTML or SQL is high. Selecting the Capabilities only option of the Run as the owner option allows consumers of a report to run it using specific capabilities of the owner, even if they do not have the required capabilities themselves. This differs from Run as the owner option in that it includes only the owner's capabilities and excludes other aspects of the owner's security context, such as access to data sources.
During normal report execution, the permissions and capabilities used to run a task are that of the caller making the run request. When Run as the owner option is selected, users other than the owner can run a task that requires access to privileged data. The task runs using the security credentials of the owner, not those of the user running the task. When the Capabilities only option is selected, users other than the owner can run a task that requires additional capabilities. The task runs using the capabilities of the owner, not those of the user running the task.
Procedure
- In IBM® Cognos® Connection, click the Set
properties icon
on the actions toolbar. - Click the Report tab for a Report Studio report, the Query tab for a Query Studio report, or the Analysis tab for a Analysis Studio report.
- Select the check box next to the owner listed under Run as the owner and then click Capabilities only.
Results
When the Capabilities only option is selected, the report runs using only the owner capabilities and not the owner credentials. The credentials of the report user, not the report owner, are used to run the report.