I need to implement authentication of user for birt report viewer while opening the reports, so that we should not be able to run the report and user authentication should also be done before opening the report.
As Iswanto San already mentioned in his comment - I would use Spring Security as well.
But it really depends on your skill set - and what you are deploying your viewer to.
If you use Tomcat - you can create a simple form authentication by following this step-by-step guide from Deron Eriksson on avajava.com.
Another option would be to follow what Birt-Exchange recommends by following the Birt-Exchange guide on security integration with the Actuate BIRT Viewers.
OR! You could integrate security straight in the report itself by following this simple guide from Balendra15.Wordpress.com.
I hope anything of this is to any help!
You could also simply add an NTLM-authentication (LDAP) filter to the BIRT's web.xml (basic Tomcat config).
More info: https://sites.google.com/site/dynamicdatamining/birt/birt-viewer-security
来源：https://stackoverflow.com/questions/16128051/how-to-secure-birt-report-viewer