#### Setting up a record-level security policy for a report

The following example shows you how to set up a record-level security policy for a report:

1. Click File > Open in JReport Designer.
2. In the Open Report Set dialog, click the Browse button to open the catalog file SampleReports.cat in `<install_root>\Demo\Reports\SampleReports`, then open the sample report EmployeeInformation.cls.
3. In the Report Inspector, select EmployeeInformation in the Datasets node.
4. In the Security section of the Properties panel, click to the right of the Record Security property entry to open the Record Level Security Information dialog. See the dialog.

5. Click the Add button to add a condition line and edit the security information as required by clicking corresponding cells.

   Since the record-level security policies are file-based, you can just create a new text file, add the security settings, and then link the file to your report. Below are steps detailing how to import the security information from a text file.

   1. In the Record Level Security Information dialog, click the Import Text button.
   2. In the Select Record Level Security File dialog, specify the text file that contains the predefined security information and click Open.
   3. Information set in the text file will be displayed in the Record Level Security Information dialog. Click the cells to edit them if required.
   4. Click OK to make the security policy applied.
6. Click OK to close the dialog.
7. Click the View tab to view the report. You will then be prompted to provide security ID (SID), which refers to the user name. Type the SID, and then click OK. Only the records which satisfy the condition will be displayed.

Notes:

- In the Record Level Security Information dialog, the data values provided in the drop-down list may not be valid for your database, because they are data values that have already been reformatted using your date format settings in JReport. For detailed information on how to set the date format in JReport Designer, see the Date Format explanation of the document Get JDBC Connection Information dialog.
- If you want to use more values in one cell, use "|" to separate them (applies to User, E-mail, and Title column). This is useful when you want to apply the same conditions to multiple users. For example, if you want user1, user2, and user3 to share the same security setting, list user1, user2, and user3 in the same cell, separated by "|", and then define the security conditions.
- Currently, you cannot save the security information to a file.
- If you want to apply more than one condition expression to a user, you can edit the condition expressions in several individual lines, typing in the same user name for each line. For such compound conditions, the relationship among them is logical OR.

  For example, both Customer ID >= 10 and Customer Name = 'Absolute Java' together will cause JReport Designer to retrieve records where customer ID is larger than or equal to 10 and the record with customer name equal to Absolute Java.

  If you want to use logical AND for the relationship between each condition expression, use a formula that returns a Boolean value to filter the records. To specify the formula name for a report, in the Properties panel, select or type the formula name in the Function property entry.

  For example, if user1 should only see records which satisfy the condition State = 'CO' and Customer ID >= 10, the formula should be:
  if ( `@State == 'CO' && @"Customer ID">= 10 ) return "user1"`

  If both the Record Level Security Information dialog and a formula have been used to control the security information, both will take effect. The relationship between them is logical OR.

- When creating the text file to include the security information, use TAB to separate each column, and always keep the headings (User, Role, Column, and so on) in the first line of the text file. For example,

  User | Role | Column | Operator | Value | E-mail | Title
  --- | --- | --- | --- | --- | --- | ---
  admin | admin |  |  |  |  |
  user1 |  | Customer ID | >= | 10 | user1@yoursite.com | Mr.
  user1 |  | Customer Name | = | 'Absolute Java' |  |
  user2 |  | Customer Name | IN | ('Absolute Java','American Coffee Inc.') | user2@yoursite.com | Miss
  user3 |  | Phone | IN | ('(212) 555-3462','(317) 555-1274') | user3@yoursite.com | Mrs.