Setting up a closed system of increasing rights

This tutorial shows how to set up the basis for a closed security model, wherein groups of users are first denied rights to all objects on the system by default. As you add folders and subfolders to the system, you increase the rights of users and groups, as required, so they can access their Crystal Enterprise content.

In this scenario, you are creating folders for several groups within your organization. These are your security requirements for each folder:

• The majority of your reports should be inaccessible to most users.
• Administrators require Full Control access to all folders and objects on the system.
• The Sales groups need a hierarchy of folders containing management reports and regional reports:
  • Only the Sales Managers can view the management reports and all regional reports.
  • Sales staff can only view reports for their own region.

This tutorial consists of the following sections:

• Restricting access from the top-level folder
• Increasing access by descending the folder hierarchy

For a lengthier, more detailed tutorial, see Setting up an open system of decreasing rights.