SAS Web Report Studio
stores information about report distribution (such as channels and
recipients' e-mail addresses) in SAS data sets. By default, the storage
is set up as follows:
-
Data sets are in your equivalent
of the
SAS-configuration-directory\Lev1\SASApp\Data\wrsdist directory
on the metadata server.
-
A corresponding SAS library is
registered in metadata (for example,
SASApp - wrsdist)
within the
\Products\SAS BI Report Services folder
path.
-
The SAS library,
SASApp-wrsdist,
is designated as the distribution library for SAS Web Report Studio
and can be viewed or managed in the BI Rep Svc Wkspace Config 4.3
Properties dialog box within the SAS Management Console Configuration
Manager.
-
Users who are assigned with the
Administrative:Manage
Distribution List capability must also have ReadMetadata
and WriteMetadata permissions to the directory where the table will
be created. These permissions are required to enable the users to
create, edit, or delete a distribution list. In the initial configuration,
ReadMetadata is granted to SASUSERS via the Default ACT, but WriteMetadata
is denied and it must be granted manually. You can either grant the
WriteMetadata permission to the SASUSERS group, or to a custom group
of users who have the
Administrative:Manage Distribution
List capability. For easier management of users assigned
to this capability, you can create a new role with this single capability
added to that role, and then assign users to this role. Users assigned
to this role can maintain these tables. The table will be created
in the directory referenced by the distribution library (for example,
SASApp-wrsdist).
CAUTION:
The primary
security concern for the wrsdist directory is limiting the Write access
so that users cannot add themselves to inappropriate distribution
lists.
-
The launch credential of the server-side
pooled workspace server (for example, sassrv) has full access to this
directory. In the standard configuration, only this account reads
from or writes to this directory.
If you adjust your workspace
server configuration, it might be necessary to adjust host access
to this directory as follows:
-
If you alter the standard configuration
so that SAS Web Report Studio uses standard workspace servers, give
users who create distribution lists full access, and make sure that
users who distribute reports have Read access.
-
If you alter the standard configuration
so that SAS Web Report Studio uses client-side pooled workspace servers,
give every puddle login full access.
If pooling is enabled,
pooled users in the Windows environment need modify access to the
directory. Pooled users in the UNIX and
z/OS environments require
Read, Write, and Execute access to the directory.