How can we customize permission hierarchy so that reports cannot be opened from report server but report can be viewable from Sharepoint pages

Hello,

I am not sure if I can recall that such feature exists. However, you can try by limiting access to SSRS server from specific IP (SharePoint server IP). Thus any direct call not coming from SharePoint server will be rejected. The users virtually still have read access to SSRS server, however since their IP is not registered - they will not be able to access directly from client PC.

To limit access based on IP, use <ipSecurity> in web.config. More information here http://www.iis.net/configreference/system.webserver/security/ipsecurity

---

Best regards,



Riwut Libinuko

SharePoint Architect, Singapore

Microsoft MVP | SharePoint Server | Singapore

Blog : http://blog.libinuko.com