Allowing specific rights

right now our reports are assigned to multiple folders. Each group has a specific access level to each of the folders and each of our users are assigned to a specific group that why the user will have the correct folder access. I have customized the rights to one of the group for the Web Intelligence application so that any user assigned to that group will be able to custome sort and manipulate the reports.

I am trying to find a way for these users to have this ability for some of the folders but not all. So lets say that I have a folder in which I want to allow a user to just view the report and to not edit them while the other two folders I want the user to be able to manipulate the reports as mentioned above. Is there a way to accomplish this?


truekc2 (BOB member since 2009-04-06)

Hi, once you are in the ‘user security’ area of a folder in 3.1, you can choose applications that you want to modify rights for. This way those rights are only for that folder.


showt2 (BOB member since 2009-05-11)

I should have posted this earlier but we are on BusinessObjects XI Release 2. Is this method possible with this release?


truekc2 (BOB member since 2009-04-06)

Not the way i described it but im sure there are work arounds in xir2.


showt2 (BOB member since 2009-05-11)

I tried assigning a user to two different groups. One of the groups with the special application rights and the other group without the special rights. Once this was done then I gave the group with the special application rights no access to a folder while giving the 2nd group View On Demand access. Once I access a report within this folder with the user that is assigned to the two groups I can still manipulate the report even though the group with those rights has no access to the folder. It seems like once both groups are assigned to the user that one groups rights for an application takes precedence over the other groups rights regardless of the groups access levels to any folders.


truekc2 (BOB member since 2009-04-06)

even though its not perfered, explicit denial will take presedence over explicitly granted…give that a shot.


showt2 (BOB member since 2009-05-11)

I gave that a shot earlier and since denied took presidence it did not allow me to manipulate the reports contained within any folder


truekc2 (BOB member since 2009-04-06)

The answer is within your question … Since you played with rights at application level there is no way to aplly granularity on some folder… It’s general settings!

Then if I can not accomplish this with the way that I am currently doing it then is there a different way to allow reports within a specific folder to be manipulated while not allowing it within another folder?


truekc2 (BOB member since 2009-04-06)

Could there possibly be a work around for this?


truekc2 (BOB member since 2009-04-06)

Does anyone know a workaround for this?


truekc2 (BOB member since 2009-04-06)