SAP Knowledge Base Article - Public

1338271 - Report saves database log on password


When a DSN-less connection is created, the database password is saved with the report and can be seen in the "Set datasource location" menu, under "Properties"

Reproducing the Issue

  1. Start a new report. Click on "Create new Connection" Choose ODBC (RDO) Enable: "Enter Connection String"
  2. Enter a Connection String a password such as:
    • Driver=SQL;Server;Server=vancsdb02;Database=Northwind;UID=xxxx;PWD=xxxx
  3. Do NOT click the <Next> button, rather click the <Finish> button You will not be asked to log on and will be able to choose a table from the
  4. Click on the <Finish> button
  5. Go to the Database menu and select "Set datasource location"
  6. Expand the "Property" icon and see that the password is saved in the report
  7. This behavior has been confirmed in CR XI R1 (11.0), CR XI R2 (11.5) and CR 2008 (12.0) SP0 and SP1


This is by design. It is up to the author of the report to ensure that the DSN-less string does not contain the database password.


KBA , BI-DEV-NET , BI Software Development Kits (SDKs) - .NET or Other , How To


Crystal Reports 2008 V1