topic Re: Use API to retrieve list of all reports a given user is authorized to view in Developers

Use API to retrieve list of all reports a given user is authorized to view

zmetz — Tue, 15 Dec 2020 20:15:36 GMT

I'm developing a front-end to a client's SAS install along with some other services. I've been successful using the Viya 3.5 APIs to retrieve collections of reports, thumbnails, etc. using an admin account token. My main task, though, is to get a list of all reports that a given user is authorized to view. Any suggestions on how I would go about that? Ideally it would all be done with the REST APIs.

Re: Use API to retrieve list of all reports a given user is authorized to view

zmetz — Wed, 16 Dec 2020 14:34:08 GMT

Edit to add: I'm not so much looking for a code example as an approach to how I would collect this and match it up. I'm a little confused by the SAS terminology (principles, memberships) as I've just shifted from doing this same thing for Tableau. Again I'm running the API as an admin user. I'm collecting this information ahead of time into my applications DB, so I will have a table of users, table of reports, and a linking table, and that will all be updated periodically. Any help is appreciated!

Re: Use API to retrieve list of all reports a given user is authorized to view

joeFurbee — Thu, 17 Dec 2020 12:50:19 GMT

Hi @zmetz,

A colleague of mine mentioned the following:

If one has a list of all the reports, then one can use https://developer.sas.com/apis/rest/v3.5/CoreServices/#obtain-an-authorization-decision to get the decision on whether a user can read a report.

We should be able to use this API to get a list of reports: https://developer.sas.com/apis/rest/Visualization/#get-a-collection-of-reports.

I've not used auth decision API previously and I don't see a set of examples. Let's explore together if we can make calls to get the info you need. I'll also check with development to get more details on the API.

Thanks,

Joe

Re: Use API to retrieve list of all reports a given user is authorized to view

zmetz — Fri, 15 Jan 2021 18:07:32 GMT

Thank you, @joeFurbee for your direction. I was able to accomplish this with an admin token and a combination of:

API "folders/rootFolders" and a function that recurses through folders, collecting reports
API "annotations/annotations?id=" for tags
API "reportImages/jobs" for thumbnails (excellent documentation here: https://blogs.sas.com/content/sgf/2018/10/31/sas-viya-rest-apis-to-access-images-from-sas-visual-analytics/)

Then to determine what the user has read access to:

API "authorization/decisions" passing: { "request": { "uri": "[uri]", "method": "GET" }, "principals": [ { "name": "[name]", "type": "user" } ], "permission": "read" }