I have an issue in my security.
I m working on BO XI 3.
I want to give rights to my users to send a report to a BO box.
When im logged as administrator, i can use this fonctionnality.
When im logged as a normal user, i can go in the “send” page, but i can t see any users in the list.
I gave following rights to my user :
he can schedule to destination (folders righrs)
he got full acces on “Everybody” (group/users rights)
he can send document (Infoview rights)
If you have any idea, it will be a pleasure to try it.
Getting the users to see the user list when sending documents to the inbox.
Resolution:
Login to CMC using administrator account.
Navigate to Users and Groups page in CMC.
Select the user list and click on the Manage .
From the Drop down menu for Manage tab , select Top Level Security -> All Users -> Everyone -> Assign Security -> Access levels -> Assign View access level -> Apply -> Ok.
Now Users can view the users list when sending the reports to other users# inbox.
Second issue was that the users could send documents, but they would never show up in their recipient’s inbox:
Resolution:
Log on to the Central Management Console as administrator.
Click Inboxes > Rights.
Click Advanced for the Everyone group.
Click the Explicitly Granted option for the right to Add objects the folder.
Click the Explicitly Granted option for the right to View objects.
I have seen this solution posted before and implemented it a number of times without much consideration. However, upon closer examination I realized there is a security problem with line 5 in the second part of the solution.
5. Click the Explicitly Granted option for the right to View objects.
By granting this right to Everyone, any user can see the contents of any other user’s Inbox if they log into the CMC. If you only allow administrators to log into the CMC then the hole is plugged. But by default, anyone can log into the CMC, they just can’t see much. In large organizations where power users or departmental heads are assigned with managing folder security for their group, they need access to the CMC, so a better solution is necessary. Has anyone addressed this issue yet?? I thought I’d ask before I waster a lot of time figuring it out.
We are using BO XI 3.1.
How can we restirct users just to see their name in the available users list when try to schedule to Inbox. As an admin i can see all the users but would like to restrict individaul users just to see their names.
Made the below change but it is showing empty list instead of the individual user.
CMC -> Users and Groups -> User List -> Manage -> Top-Level Security -> All Users -> Everyone -> Assign Security -> Advanced -> View Objects (Denied).
Also tried View Objects (Denied) and View objects that the user owns (Granted) but still no use. Please let me know how we can achieve this.
You realize that if you only want users to be able to send documents to their own Inbox that the Default Inbox is their own? If you set the “View Objects” setting back to “Not Specified” it will prevent them from seeing others. When they go to send (or schedule) to an Inbox they should leave the checkbox “Use default settings” checked. In that case they don’t need to see a list of users.
If i set the “View Objects” right to “Not specified” it is listing all the users in my system, default location will be the enterprise default location where the report is placed. When scheduling i would like to schedule to the inbox and just want to select the user who logged in in the pick list.
When you schedule it, select Formats and Destinations on the left, check the Inbox option, and expand the section which appears below, titled “Destinations Options and Settings”.
I am scheduling a crystal report through Infoview XI 3.1, selected destination on the left and BO Inbox in the destination drop down. I don’t see any option called Destination Options and settings. Please let me know where i can find this. All i can see is destination drop down, available user list, target name and send as options.
I never have been in a situation where users, even so-called power users would be allowed access to do anything within the CMC. A proper configuration/content management process would suffice.
However, that being said, your point is well taken.
(BOB member since 2008-11-19)