The system is designed to not impose any significant performance penalty. The security information is collected at the time the user opens an Interactive Reporting document from the server’s repository, and only then if the server knows the security controls are enabled. When a user opens a locally saved Interactive Reporting document from a previous session with the Reporting and Analysis services, the security information is recollected when reconnecting to the server in case it has changed.