Role Property

Specifies the role for the principal. This is the recommended way of applying rights.

Syntax

Property Role as CeRole

Remarks

A role is a predefined set of object rights that allow you to set common object security levels quickly. They are designed to cover the most common cases of security rights sets, and can be applied to the principal with the Role Property.

Tip:    It is recommended that you start by using roles, and then specify more granular rights if necessary. The rights that are listed for each role are always granted to the principal, and never denied. See the "Appendix A: Object Rights and Access Levels" in the Crystal Enterprise Administrator's Guide for a list of the granular rights granted for each role.

The available roles are Advanced, No Access, View, Schedule, View On Demand, and Full Control. Access modes are based on a model of increasing rights: beginning with No Access and ending with Full Control, each access mode builds upon the rights granted by the previous mode. For example, the Schedule access mode includes and adds to the rights that are granted by the View access mode. The Advanced role allows you to set individual rights on the object.

Note:    Roles are referred to as "access modes" in the Crystal Enterprise Administrator's Guide.

A role's predefined rights are automatically added to the SecurityRights Collection. As soon as a principal is given specific rights to an object, the role automatically becomes set to the Advanced mode. Use the SecurityRights Collection's Add Method to give the principal specific rights. If the principal is inherited, and the Advanced mode has been set, then the AdvancedInheritFolders Property will be set to True by default.

The rights for a role are always granted and never denied, which means that if you give a principal specific rights, these rights will be respected, unless they have been explicitly denied elsewhere and passed down through inheritance.

Note:    When you set limits to a principal who has rights on the object, either explicit or inherited, the rights stay exactly as they were. If the principal has no rights on the object, neither inherited or explicit, then when you set limits, the role will become Advanced with no rights.