Hi,
I've integrated the 2016 reportviewer into an mvc app, i did that initially with ReportViewerForMvc tweaked manually to use the 2016 version, i've now gone away from using that framework after discovering that when some users where pulling reports they could sometimes get another users report, but i still want to be sure that no one else has had this issue.
The way it works is when the user loads the page a clientuid gets passed down into the reportcontrol as a parameter, which is then used in all database requests in the reports, that shouldn't really cause any issue,
but what happens sometimes(and only sometimes, there was up to 30 requests from different clients every minute until the viewer was disabled) is that when another user within 1-2 minute accesses the same report they get the other users report.
Does anyone know a way of securing it so there wont be a chance of getting reports from another session?