Team,

Are there plans to support to the new Token Replace engine that Stefan talks about in his blog here(http://www.dotnetnuke.com/Community/Blogs/tabid/825/EntryID/1547/Default.aspx) in the Reports Module?  It would be great to be able to create reports that can use framework values in selection criteria such as this simple example...

select * from UserRoles where userid = [User:Userid]

I have an immediate need to build a query that returns transaction summary data based on userid (i.e. sales for the year).  I was planning to do it with a custom module until I saw Stefan's post about the new token functionality in 4.6.0.

Thanks, Chuck

Chuck,

I need the same thing.... Did you ever get a solution?

I

The Reports module does support passing the PortalID, TabID, ModuleID and UserID to the query by using the following SQL Parameters: @PortalID, @TabID, @ModuleID, @UserID. So if any of those four parameters are used in the Query, they will automatically be replaced with the current Portal, Tab, Module, or User ID (respectively). This is done in a secure way, to avoid SQL Injection attacks. For example, if you want to retrieve information about the current user, you can use this query:

SELECT * FROM dnn_Users WHERE UserID = @UserID

Note that you must disable caching, otherwise one User may be able to see another User's results.

There are plans for a more detailed parameter system in future releases, but I can say this: Reports Module will never support TokenReplace due to security issues. TokenReplace is a very useful system, but the parameter system provided by SQL Server is much more secure and avoids SQL Injection attacks.

Andrew Nurse
DotNetNuke Core Team Member and Reports Module Project Lead
Microsoft Certified Professional Developer