Base rights and available rights

The Crystal Enterprise system defines a set of base rights that apply to all objects in the system. For example, the "View objects" right is a base right: it applies equally well to folders, to reports, and to other Crystal Enterprise objects. In addition to these base rights, however, each type of object provides an additional set of rights that apply only to that object type. For example, the "Refresh the report's data" right applies only to report objects.

The Automated Process Scheduler (APS) is the component that keeps track of available rights. The list of available rights includes the base rights and all other object-specific rights that have been provided by particular object types, such as Crystal report objects.

On the Advanced Rights pages, you will find that all of the available rights are displayed for every object on the system. For example, the rights displayed for a folder object seem to correspond exactly to the rights displayed for a report object, even though object-specific rights such as "Refresh the report's data" do not apply to folder objects.

Available rights are displayed for every object on the system for purposes of inheritance, so that you can set object security at the folder level (rather than repeating the same settings for every object in the folder). Although certain object-specific rights do not strictly apply to the folder object itself, these rights may apply to objects that inherit rights from the folder. In other words, the "Refresh the report's data" right is displayed for the folder object so that you can grant a user the right to refresh the data in all reports for which the user inherits rights from this folder.

Note:    This is only one type of object inheritance. For more information, see Group and folder inheritance.