Excel服務VIII――控制和保護數據表

Excel服務VIII――控制和保護數據表

譯者：rongjun? 來源：http://blogs.msdn.com/excel 發表于：2006年7月7日

Excel Services part 8: Controlling and protecting spreadsheets Excel服務第8部分：控制和保護數據表

To this point in my discussion of Excel Services, I have written primarily about the user-facing part of Excel Services – all the things customers can do with Excel Web Access and Excel Web Services in order to execute and interact with workbooks on the server.? In the next two posts, I plan to cover some of the security aspects of Excel – how customers who deploy Excel Services can “lock down” and protect key spreadsheets. 在我以前的有關Excel服務的論述中，我主要介紹過Excel服務的用戶界面部分——用戶可以利用Excel Web Access和Excel Web服務完成這些操作，使得數據表在服務器上與工作簿相互結合。在下兩篇文章中，我打算介紹一些Excel安全方面的知識——配置Excel服務的用戶怎樣才能“鎖定”和保護關鍵數據表。

In my overview of Excel Services, I mentioned that a request that we frequently hear from customers is the ability to limit access to spreadsheets either for regulatory and audit concerns or to protect proprietary information in spreadsheets.? To address this requirement, one of the main things that we’ve done (in addition to allowing users to execute and view spreadsheets on the server) is extended the Windows SharePoint Services (SharePoint) architecture with a new “right”, which we call a the “View Item” right. 在我的“Excel服務概覽”這篇文章里，我提到過，用戶經常給我們提出這樣一個要求，要求我們提供限制訪問數據表的功能，例如：管理和審核利害關系或者保護專有信息。為了達到這個要求，我們所做的主要事情就是給Windows SharePoint服務體系增加一個“權限”（除了允許用戶在服務器上訪問和查看數據表），我們把它叫做“查看項目”權限。

Before I get into exactly what the View Item right is, let me give a bit of background on what SharePoint is, and how it relates to Excel Services.? As I’ve mentioned in previous posts, Excel Services is built as part of the SharePoint products and technologies platform.? For the context of this conversation on the View Item right, consider SharePoint as a document store on the server – users can save and version files, administrators can control access permissions, etc., all via any browser? (Note, SharePoint does *a lot* more than this – in addition to being a document store, SharePoint provides many more features which you can read about here). 在我還沒有深入介紹什么是查看項目權限之前，讓我先簡單的介紹一下什么是SharePoint，它是怎樣和Excel服務發生聯系的。正如我在前面的文章中提到，Excel服務是基于SharePoint產品和技術平臺的一部分。為了便于理解查看項目權限，在這里我們把SharePoint看作服務器上的一個文檔庫——用戶可以保存和修改文件，管理員可以控制訪問權限等等，所有這些通過任何一個瀏覽器都能實現（注：SharePoint還可以做更多的事情——除了作為一個文檔庫之外，SharePoint還提供更多的功能，你可以看這里）

Currently, SharePoint administrators can give users “Reader” rights (look at content), “Contributor” rights (look at, change, and add to content), or “Administrator” rights (full control).? One way to think of this is similar to a regular file system and the file access rights that can be set (e.g. read only, read/write etc.) 通常，SharePoint管理員可以給用戶“閱讀”權限（查看內容），“投稿”權限（查看、修改和添加內容），或者“管理”權限（完全控制）。咋一看這與正式的文件系統很相似，可以設置文件的訪問權限（例如只讀、讀/寫等等）。

With the View Item right that we are adding, customers can lock down spreadsheets that have been published to SharePoint (this right is specific to SharePoint document libraries and does not work with workbooks stored in UNC shares or generic HTTP locations) such that users can open the spreadsheets using Excel Services, interact with the workbooks, and see the execution results, but can’t download a copy of the spreadsheet, or access any areas that were not published as viewable on the server.? This hides any proprietary information contained within the book – specific formulas, the proprietary model, the external data connections, and hidden elements of the book – all of these things become inaccessible to users. 由于查看項目權限的添加，用戶可以鎖定已經發表到SharePoint的數據表（這個權限是SharePoint文檔庫特有的，它與存儲在UNC共享或者普通HTTP域的工作簿不同），這樣，用戶可以通過Excel服務打開數據表，與工作簿相互作用，可以看到執行的結果，但是不能下載數據表的副本，并且不能訪問服務器上任何非可見區域。這里隱藏了文檔里的專有信息——特殊公式、專有模型、外部數據連接和文檔的隱藏單元——所有這些東西用戶都無法接觸。

Let’s look at some examples of how View Item can be used in an Excel Services solution.? Imagine a workbook that takes several inputs, and then calculates discount rates for a large retailer.? The discount rate for any specific distributor is dependant on many factors – what quantity of product is purchased, the time of year, and the number of previous transactions for a given distributor – and of course, this discount rate formula is carefully guarded by the retailer since it determines the profit made on each transaction.? With Excel Services, this retailer can now allow distributors View Item right to the workbook containing this sensitive model, without having to worry that they will actually be able to download or see the model. 讓我們來看看查看項目在Excel服務中應用的一些例子。假設某個工作簿里有若干錄入數據，然后要為一個大零售商計算折扣率。無論哪個批發商的折扣率都是決定于很多因素——產品購買量、時間、既定批發商以前的交易量——當然，零售商會小心的控制折扣率公式，因為它決定著每一筆交易所獲得的利潤。利用Excel服務，零售商可以允許批發商擁有這個工作簿的查看項目權限，并限制敏感的模型，所以零售商不必擔心批發商能夠下載或看到模型。

The View Item right affects how both Excel Web Access and the Excel Web Services allow access to a workbook.. Let’s look at the specific elements that are affected: 查看項目權限影響著Excel Web Access和Excel Web服務訪問工作簿的方式。讓我們來看看具體的影響因素：

1. Which portions of the workbook can be accessed by a user:? When a user only has the View Item right, they can only see the portions of the workbook that have been marked as viewable on the server during the publish process. 1、工作簿的哪個部分能被用戶訪問：當該用戶只有查看項目權限時，那么他就只能看到工作簿的可見部分。

View Item right prevents users from seeing ranges that were not marked as viewable during publish 查看項目權限阻止用戶查看非可見區域

2. Which portions of the workbook can be opened in Excel:? While users with the Reader right can always open the original workbook in Excel if they want to see the model/formulas/data connections/etc., users with the View Item right can only open a snapshot of the original workbook in Excel.? A snapshot is much like what you would get with a copy/paste values and formatting, so that the user can see the numbers, but none of the proprietary information behind those numbers (formulas, connections, etc.), since that information is not contained in the snapshot.? And, of course, they can only see the numbers for the portions of the workbook that were marked as visible on the server. 2、工作簿的哪個部分能在Excel里打開：擁有閱讀權限的用戶，如果想要看到模型/公式/數據連接等等，他們可以在Excel中打開原工作簿；擁有查看項目權限的用戶在Excel中只能打開原工作簿的瞬態圖。瞬態圖就像復制/粘貼數值和格式得到的結果一樣，所以用戶只看到數字，而在這些數字后面并沒有專有信息（公式、連接等等），也就是說瞬態圖不包含這些信息。當然，他們只能看到工作簿可見部分的數據。

Workbook contains formulas and other proprietary information 工作簿包含公式和其他專有信息

Snapshot contains only the numerical values and formatting 瞬態圖只包含數值和格式

These examples focus on accessing the spreadsheet through the browsing using Excel Web Access (the browser).? Similarly, if an application accesses the spreadsheet through Excel Web Services, the View Item right is enforced.? For example, issuing a “GetRangeA1” call to a range that has not been marked as viewable will result in an exception, as will “GetWorkbook”. 這些例子集中在通過Excel Web Access（瀏覽器）訪問數據表。同樣的，如果某個應用程序通過Excel Web服務訪問數據表，那么查看項目權限是被強制執行的。例如，發布一個“GetRangeAl”作為沒有標記為可見的區域，那么就會導致出現異常，同樣也會發生在“GetWorkbook”上。

That sums up how users can lock down spreadsheets to protect proprietary information/ensure everyone is looking at the latest sanctioned version using the new View Item right within SharePoint.? Next, more about some of the security functionality that we’ve built into Excel Services – how Excel Services decides whether or not to execute a workbook, how it connects to external data sources, and how it integrates with some of the other security features in SharePoint like versioning, IRM, and document approval. 這篇文章概括了用戶怎樣鎖定數據表以保護專有信息/怎樣利用SharePoint里的查看項目權限保證每個人正在看的是最新的標準版本。下次，介紹一些Excel服務安全性的知識——Excel服務怎樣判斷是否運行工作簿，它怎樣連接外部數據源，它怎樣與SharePoint的其它安全特性（如版本、IRM、文檔證明）相結合。

Published Tuesday, November 22, 2005 5:16 PM by David Gainer

非常感謝Kevin的幫助和指導!

版權聲明：本文內容由網絡用戶投稿，版權歸原作者所有，本站不擁有其著作權，亦不承擔相應法律責任。如果您發現本站中有涉嫌抄襲或描述失實的內容，請聯系我們jiasou666@gmail.com 處理，核實后本網站將在24小時內刪除侵權內容。

版權聲明：本文內容由網絡用戶投稿，版權歸原作者所有，本站不擁有其著作權，亦不承擔相應法律責任。如果您發現本站中有涉嫌抄襲或描述失實的內容，請聯系我們jiasou666@gmail.com 處理，核實后本網站將在24小時內刪除侵權內容。