Anonymous access in BDC
When anonymous users log into the SharePoint site which has BDC web parts, you will see the error message “You do not have permission to access abc in xyzInstance”. This is fixed in the Infrastructure update of WSS and MOSS. In the Application Definition File, for each method instance ( for which we need to give anonymous access), we need to add a property called AllowAnonymousExecute. Its a boolean value which needs to be set as true.
<MethodInstance Type="Finder" ReturnParameterName="Products" ReturnTypeDescriptorName="ProductDataReader" ReturnTypeDescriptorLevel="0" Name="ProductFinderInstance">
<Properties>
<Property Name="AllowAnonymousExecute" Type="System.Boolean">true</Property>
</Properties>
</MethodInstance>
Remember, this is effective only on MethodInstances. Internally Association is a special MethodInstance and so it should work when AllowAnonymousExecute property is used within it as well. This essentially means that it works for all the BDC web parts including Business Related Web Part.
<Associations>
<Association Name="FK_DimProduct_DimProductSubcategory_Instance" AssociationMethodEntityName="DimProduct" AssociationMethodName="FK_DimProduct_DimProductSubcategory" AssociationMethodReturnParameterName="@DimProduct" AssociationMethodReturnTypeDescriptorName="Reader" AssociationMethodReturnTypeDescriptorLevel="0" IsCached="true">
<Properties>
<Property Name="AllowAnonymousExecute" Type="System.Boolean">true</Property>
</Properties>
<SourceEntity Name="DimProductSubcategory" />
<DestinationEntity Name="DimProduct" />
</Association>
</Associations>
Comments
- Anonymous
March 04, 2009
The comment has been removed - Anonymous
March 04, 2009
Can you tell me which BDC web part you are trying to connect to ADF so that we can figure out the method instance type used ? If possible, paste the chunk of xml used. - Anonymous
March 16, 2009
Does this method work with SSO? - Anonymous
March 16, 2009
Well, then i believe you are defeating the whole purpose of using SSO. SSO is for single sign authentication and anonymous access is completely a different concept ! - Anonymous
March 16, 2009
Thank you for your quick response. SSO has been set up for an intranet set which has been extended to an internet site. Can you point me to a 'best practice' for setting up bdc connections and anonymous access? Does ssp have to be extended as well? - Anonymous
March 16, 2009
I found the information I was looking for in Chapter 12 of Microsoft Office SharePoint Server 2007 Administrator's Companion. Thanks!