User`s guide

Migrating your existing security model
To continue to use the data access restrictions that you defined using a previous version of SAP
BusinessObjects XI Integration (using the ZRLS transaction), you can import these restrictions into
client-dependent form using /CRYSTAL/RLS. Import these data restrictions before using /CRYSTAL/RLS
to create or modify additional restrictions. Any changes you made using /CRYSTAL/RLS will be
overwritten when you import the global restrictions.
To apply your global data access restrictions to additional clients, import these restrictions once for
each client.
To migrate data access restrictions
1.
Enter the transaction /CRYSTAL/RLS in your SAP system.
2.
Under the Extras menu, select Import Global Data.
A dialog appears, warning you that importing these restrictions will overwrite any restrictions you
have defined using /CRYSTAL/RLS.
3.
Click Yes.
Your global, client-independent data access restrictions are imported.
Choosing your table-level security model
For enhanced flexibility, the Security Definition Editor provides a Global Lock feature, which allows you
to define the basis of your data access security model in one of two ways:
• Global Lock disabled
This open security model initially provides all users with access to all tables. To customize the model
to match your current SAP security configuration, you can prevent users from accessing particular
tables on a table-by-table basis. When you first deploy the Data Access , the Global Lock is disabled
by default.
• Global Lock enabled
This closed security model initially denies all users access to all tables. To customize the model to
match your current SAP security conventions, you can authorize users to access particular tables
on a table-by-table basis. Additionally, you can specify a list of custom functions that users can still
report off when the Global Lock is enabled.
Once you have enabled or disabled the Global Lock, you can refine the security model by customizing
data access authorizations for particular tables.
To enable/disable the Global Lock
1.
From the SAPGUI, execute transaction /CRYSTAL/RLS.
The "Security Definition Editor" appears.
2012-03-14611
Integrating Business Applications with Crystal Reports