1338271 - Report saves database log on password

When a DSN-less connection is created, the database password is saved with the report and can be seen in the "Set datasource location" menu, under "Properties"

1. Start a new report. Click on "Create new Connection" Choose ODBC (RDO) Enable: "Enter Connection String"
2. Enter a Connection String a password such as:
   • Driver=SQL;Server;Server=vancsdb02;Database=Northwind;UID=xxxx;PWD=xxxx
3. Do NOT click the <Next> button, rather click the <Finish> button You will not be asked to log on and will be able to choose a table from the
   database.
4. Click on the <Finish> button
5. Go to the Database menu and select "Set datasource location"
6. Expand the "Property" icon and see that the password is saved in the report
7. This behavior has been confirmed in CR XI R1 (11.0), CR XI R2 (11.5) and CR 2008 (12.0) SP0 and SP1
   

This is by design. It is up to the author of the report to ensure that the DSN-less string does not contain the database password.

KBA , BI-DEV-NET , BI Software Development Kits (SDKs) - .NET or Other , How To