what should my CE security scheme be?

[new2ce]

I am new to Crystal Enterprise 9. Our developers have created 'canned reports' which will be made available to our user departments. My big concern is security. How do I pass data base credentials along so that I can be sure a user only sees data they should see? I am contemplating organizing users into specific groups, which have access to very specific folders and then within the folders only the reports they should see. The reports have been written to filter on dept id, but it seems when given the chance to create a new report (or schedule a report) the users can make a new dept id filter selection. I could also possibly drop the wrong report into the wrong folder. We are using an SQL 2000 data base. Any help would be appreciated. The Crystal reports have been written using views, not tables.

 

[RyanoUK]

If your thinking of using Trusted ODBC connections, you need to use Single Sign On security. This is NT authentication.

 

[new2ce]

thanks for your suggestion - are there drawbacks to single sign on? can single sign on be used with Macs? are you -or is anyone currently using LDAP?