UserDesignerOptions.ReportLoadingRestrictionLevel Property

Specifies whether end-users are allowed to load untrusted reports with potentially dangerous content in a desktop reporting application.

Namespace: DevExpress.XtraReports.Configuration

Assembly: DevExpress.XtraReports.v24.1.dll

NuGet Package: DevExpress.Reporting.Core

Declaration

C#

public RestrictionLevel ReportLoadingRestrictionLevel { get; set; }

VB.NET

Public Property ReportLoadingRestrictionLevel As RestrictionLevel

Property Value

Type	Description
RestrictionLevel	A RestrictionLevel enumeration value.

Available values:

Name	Description
Enable	Permit loading untrusted reports by end-users via application GUI.
Disable	Forbid loading untrusted reports by end-users via application GUI.
Prompt	Ask for an end-user’s permission on every attempt to load an untrusted report.

Property Paths

You can access this nested property as listed below:

Object Type	Path to ReportLoadingRestrictionLevel
ReportingSettings	.UserDesignerOptions .ReportLoadingRestrictionLevel
Settings	.UserDesignerOptions .ReportLoadingRestrictionLevel

Remarks

End-User Report Designer (WinForms and WPF) displays the following warning when a user attempts to load a potentially unsafe report:

A report is considered unsafe if it or any of its subreports contain any of the following:

• serialized code
• report scripts
• object data sources

The following code prevents users from loading unsafe reports:

C#

static class Program {
    static void Main() {
        DevExpress.XtraReports.Configuration.Settings.Default.UserDesignerOptions.ReportLoadingRestrictionLevel =
    DevExpress.XtraReports.UI.RestrictionLevel.Disable;
    }
}

VB.NET

Partial Friend Class MyApplication
    Public Sub New()
        MyBase.New(Global.Microsoft.VisualBasic.ApplicationServices.AuthenticationMode.Windows)
        DevExpress.XtraReports.Configuration.Settings.Default.UserDesignerOptions.ReportLoadingRestrictionLevel = _
            DevExpress.XtraReports.UI.RestrictionLevel.Disable
    End Sub
End Class

The code above displays the error message when the user attempts to load a potentially unsafe report.

In a restricted environment where all reports are guaranteed to be safe, you can disable this warning and allow users to load any report by setting the UserDesignerOptions.ReportLoadingRestrictionLevel property to RestrictionLevel.Enable.

The following code lets you determine whether a report is considered unsafe, and displays detected security warnings in the Output window:

C#

var traceSource = DevExpress.XtraPrinting.Tracer.GetSource("DXperience.Reporting", 
    System.Diagnostics.SourceLevels.Error | System.Diagnostics.SourceLevels.Warning);
var listener = new System.Diagnostics.DefaultTraceListener();
traceSource.Listeners.Add(listener);
try {
    new XtraReport1().ShowRibbonDesignerDialog();
} finally {
    traceSource.Listeners.Remove(listener);
}

VB.NET

Dim traceSource = DevExpress.XtraPrinting.Tracer.GetSource("DXperience.Reporting", _ 
    System.Diagnostics.SourceLevels.[Error] Or System.Diagnostics.SourceLevels.Warning)
Dim listener = New System.Diagnostics.DefaultTraceListener()
traceSource.Listeners.Add(listener)
Try
    New XtraReport1().ShowRibbonDesignerDialog()
Finally
    traceSource.Listeners.Remove(listener)
End Try