AdvancedInheritFolders Property

Returns True if rights can be inherited from parent folders, and False otherwise.

Syntax

Property AdvancedInheritFolders As Boolean

Remarks

You can set both the AdvancedInheritFolders Property and the AdvancedInheritGroups Property to True. When both types of inheritance are enabled, the APS grants the user only those rights that are explicitly granted in one or more locations and never explicitly denied. See the Crystal Enterprise Administrator's Guide for a detailed explanation of the algorithm that the APS uses to determine the principal's net rights to an object.

The following table is an example of how the net rights for a principal is calculated if rights are inherited from a single parent object, and if explicit rights have been set on the child object.

Inherited right	Explicit right	Net right
Granted	Not specified	Granted
Not specified	Granted	Granted
Not specified	Not specified	Denied
Denied	Anything	Denied
Anything	Denied	Denied

Because of the relative priorities assigned by Crystal Enterprise to granted and denied rights, it is often best to disable inheritance entirely when you choose to explicitly grant certain rights.

To retrieve the rights that the principal inherits, use the InheritedRights Property. To check the current user's net rights, use the CheckRight Method.

Note:    When a Role Property is set to ceRoleAdvanced, and the principal is inherited, then by default the AdvancedInheritFolders property is set to True. If the principal is not inherited, then AdvancedInheritFolders and AdvancedInheritGroups can be set to either True or False.