Reports security 1

[vasu2005]

Hi all,

I am not much aware of crystal administration and tasks. I have different reports related to sales, inventory, product details. On crystal enterprise we use Windows NT login not the enterprise user set up. I need to publish the reports on the web so that respective departments can access only their own reports. Can any one tell me how would I maintain the security so that only the perticular reports can be accessed by certain gruop of people.

If I were be a crystal administartor what are the major areas I should know and where would I find the details on those areas.

I would really appreciate any help regarding this.

Thanks,

-V

 

[Turkbear]

Hi,
In general, you would create NT groups (on the CE Server) that have the particular users as members and, using the CMC, you can then enable NT authentication and bring in the NT groups( which will also bring in the members) you created.
Assign rights to the reports based on those groups ( either by placing them in separate folders and restricting access to the folders to a particular group or groups or by setting the rights on a report-by-report basis...Once a user logs into CE the only folders/reports available will be the ones you granted that user's group access to ( and/or to those that are available to everyone)

Good luck....






To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[malcolmt]

Something else for you to consider......

I have at least once experienced problems with NT or AD group mapping to CE being corrupted which caused much grief in restablishing my security model.

To minimise the impact of this happening again, I have since adopted the practice of only assigning users rights to objects within CE via CE groups.

For example, if I add an AD group to CE, I create a corresponding CE group and make the AD group a subgroup of the CE group. I then assign all object & folder rignts via the CE group. If for any reason, the AD group becomes corrupted I do not lose my CE security model - I do have a problem to fix, but I only have to remove and re add the AD group in CE and then make it a sub group of my CE group again.

Hope this helps for the future,

Malcolm.

 

[MJRBIM]

Malcolm - That's a good idea. I've had the corrupted WinAD issue once or twice in the past. There's a question you'll never see on an CECP exam.....