Use this collection to set granular rights on an object for a particular principal (user, group). The Crystal Enterprise system defines a set of base rights that apply to all objects in the system. For example, the "View objects" right (ceRightView) is a base right: it applies equally well to folders, to reports, and to other Crystal Enterprise objects. In addition to these base rights, however, each type of object provides an additional set of rights that apply only to that object type. For example, the "Refresh the report's data" right (ceReportRightRefreshOnDemandReport) applies only to report objects.

The Crystal Automated Process Scheduler (APS) is the component that keeps track of known or available rights. The list of available rights includes the base rights and all other object-specific rights that have been provided by particular object types, such as Crystal report objects.

For the purposes of inheritance, you may want to select a number of available rights and add them to the object's SecurityRights Collection, even if they don't apply directly to that object. By doing this, you can set object security at the folder level (rather than repeating the same settings for every object in the folder). Although certain object-specific rights do not strictly apply to the folder object itself, these rights may apply to objects that inherit rights from the folder. In other words, if you add the "Refresh the report's data" right to a folder object's SecurityRights collection, you can grant a principal the right to refresh the data in all reports that are contained in this folder.

Tip:    It is recommended that you start by using the Role Property to apply a set of basic rights, and then specify more granular rights if necessary. The rights that are listed for each role are always granted to the principal, and never denied. See the "Appendix A: Object Rights and Access Levels" in the Crystal Enterprise Administrator's Guide for a list of the granular rights granted for each role.

The rights that are granted through roles are automatically added to the collection. Any rights that are not in the SecurityRights Collection, and thus have not been explicitly granted or denied, are considered to be "not specified."

Properties

Property	Description
Count Property	The number of items in the collection. Read-Only.
Item Property	Returns an object given an index. Read-Only.

Methods

Method	Description
Add Method	Adds a new right to the collection.
Delete Method	Removes a right from the collection.