Managing Content

Managing content means managing all the various objects, for instance Crystal Reports, Web Intelligence Documents, Excel and Word files, programs, packages, and OLAP Intelligence reports that are published to BusinessObjects Enterprise. As discussed in earlier chapters, all of these are referred to as content.

The management of content implies a host of tasks, from organizing items into various container folders to applying restrictions (or rights) to the actual objects. If not planned correctly, content management can be one of the most time-consuming tasks for a BusinessObjects Enterprise administrator. Again, with delegated administration, this task can be distributed to various subject matter experts around the organization, saving the IT department this type of work, which often involves knowledge of a particular department's requirements in detail.

The flexible BusinessObjects Enterprise architecture accommodates almost any content-management scheme. However, there are some general guidelines to follow when determining the best approach to content management. A content management scheme consists of a folder/subfolder tree that can be defined within BusinessObjects Enterprise and the associated permissions on those folders. Categories, which are new in BusinessObjects Enterprise XI, allow for a secondary grouping of objects that may traverse the folder/subfolder hierarchy.

An effective content-management scheme should have the following characteristics:

• Both descriptive and easy to understand folder and report names

• A standard report naming convention consistently applied throughout the system

• Strictly controlled object access that adheres to the organization's business rules

• A folder hierarchy that facilitates rapid end-user navigation to every report object

• Reliable reports with accurate database logon information

Managing Objects

Objects in BusinessObjects Enterprise are published into the object store. Objects, when published into BusinessObjects Enterprise, are managed through the CMC. This chapter uses the terms report and object interchangeably because most objects are, in fact, reports.

This book has already provided some object publishing and management review. The Publishing Wizard, a Windows-based application for publishing reports to BusinessObjects Enterprise, primarily publishes most content through the Save As functionality of Crystal Reports or OLAP Intelligence. This chapter reviews object publishing and management from the CMC perspective.

It's also important to note that the object type determines the options and properties available to the BusinessObjects Enterprise system administrator. For instance, because OLAP Intelligence reports cannot be scheduled like Crystal Reports, no scheduling options are displayed when administering an OLAP Intelligence report.

Because Crystal Reports are the most widely used report type, this chapter focuses primarily on that object type. Special attention is also paid to Web Intelligence because it is new in the XI release.

Publishing Objects from the CMC

To add a new report to BusinessObjects Enterprise, start the CMC and, from the home page, select Objects, and then the New Object button, as shown in Figure 27.14.

Figure 27.14. The New Object function enables you to add a new object to BusinessObjects Enterprise.

For more information on objects in BusinessObjects Enterprise, p. 602.

After selecting New Object, the New Object dialog launches, shown in Figure 27.15. On the left is a list of all supported objects which can added to the system. This list is restricted by the added keycodes. In BusinessObjects Enterprise XI Premium edition, all the possible supported objects are listed.

Figure 27.15. The New Report dialog enables you to add objects to BusinessObjects Enterprise from an external directory location. Supported objects are listed on the left.

To add a report, choose to add a report type of object on the left, and then type the path and filename of the report in the File Name box, or click the Browse button to locate the report file.

After selecting the report filename, indicate whether a thumbnail image of the report should be generated and displayed. A report thumbnail is an image snapshot of page one of the report. This feature is currently available for Crystal Reports only. A thumbnail is merely a property of the report object, something that can be called programmatically or displayed only as an option. BusinessObjects InfoView, the default end-user interface for BusinessObjects Enterprise, is a good example of an application that uses the report thumbnail.

The Generate Thumbnail for the Report option is useful for visually identifying reports, and it's recommended that the BusinessObjects Enterprise administrator leave the setting enabled.

In order to take advantage of the Generate Thumbnail for the Crystal Reports object, the report designer must save the report with the Save Preview Picture option at design time. This achieved in the Crystal Reports Designer application by clicking File, Summary Info.

While enabling this option in Crystal Reports, it's highly recommended that the Title, Author, and Comments fields be filled in because this information is available to users in BusinessObjects Enterprise applications for report identification and searching. All these properties are stored in the BusinessObjects Enterprise system database and can be leveraged for more specific report discovery.

The Summary Info dialog must be completed during report creation for the thumbnail (or report description details) to be available inside BusinessObjects Enterprise.

Checking the Use Object Repository when refreshing report option, refreshes the repository objects added to the report with the most current objects in the Object Repository. The Object Repository is a feature in BusinessObjects Enterprise where standard report components are centrally stored for use several reports. For instance, if the report designer had placed a corporate logo image file stored in the Object Repository onto the report and the check box was enabled, BusinessObjects Enterprise would check to see that the copyright text was the latest version stored in the repository and update it if a more current copy is available.

As mentioned earlier, a new feature in BusinessObjects Enterprise XI is Categories. When publishing a report the administrator can select any number of the existing categories that exist in the system. These can be from the list of Corporate Categories, Personal Categories or both. By enabling the All Selected Categories check box, the list will be only those categories that have been selected. By unchecking the check box, the list of categories will return to all available categories in the system.

The final step to adding a new report to BusinessObjects Enterprise is to select the desired enterprise folder that contains the report. This is done using the Destination option at the bottom of the New Report screen. Simply highlight the folder that should house the new report and click OK. The BusinessObjects Enterprise administrator can also navigate to subfolders by highlighting the parent folder and clicking the Show Subfolders button.

Note

Web Intelligence documents are an exception to the report publishing described above. Web Intelligence documents are created interactively against available universes then saved into the BusinessObjects Enterprise system.

Configuring Report Properties

The CMC now displays a report Properties tab, shown in Figure 27.16. The Report Title is indicated at the top of the screen. This is the actual name that BusinessObjects Enterprise displays when users browse for the report. The report name is actually taken from the report's Title field, which can be edited in the Summary Info dialog screen in Crystal Reports. The BusinessObjects Enterprise administrator can override the default title by manually typing a different title. Report titles can contain upper- and lowercase characters, as well as spaces.

Figure 27.16. The Properties screen displays the report title, description, and other pertinent details.

Note

Use a consistent naming convention for all reports, and make the report titles reasonably descriptive. This reduces object management issues when dealing with hundreds or thousands of distinct reports.

The File Name field indicates the true path and location of the actual file as it is managed by the File Repository Server (FRS). This information is controlled by BusinessObjects Enterprise and cannot be edited. It's displayed as a reference for troubleshooting purposes.

The Description field can be used to add a detailed paragraph to note any special information about the report. The Description field is displayed in the Web Desktop, and it also will be parsed by the Web Desktop report keyword search feature.

Note

Developers sometimes use the Description field as a catchall for keywords about the report that can be searched by a BusinessObjects Enterprise application. Although this might be effective for a small number of reports, it can adversely affect system performance when you're dealing with large numbers of reports and is not recommended.

The Folder Path at the top of the screen immediately above the title of the report, shows the folder structure that contains this report. Each word can be clicked to navigate to that folder. To move this object, you would first go to the containing folder, and then choose the Copy/Move/Shortcut button.

The upper-right corner of the report Properties tab contains a Preview button. The Preview button runs the report immediately on the first available Page Server. This option is useful for verifying database connectivity for the report without opening the Web Desktop.

The bottom of the report Properties tab, shown in Figure 27.17, allows the BusinessObjects Enterprise administrator to enable the report thumbnail image using the Show Thumbnail check box. Be aware that the report must be designed with the Save Preview Picture option enabled for this setting to take effect, in addition to the settings required in Crystal Reports discussed earlier.

Figure 27.17. Additional options in the report Properties tabthe links subsection.

If any changes are made to the report Properties tab, you need to click the Update button at the bottom of the screen to commit the modifications to the system. After clicking Update, the Properties tab refreshes; this indicates that the changes were successfully committed to the system database.

On the Properties tab, just below the word Properties, links to navigate to the Refresh Options and Links appear. Clicking on Refresh Options navigates to an area where you can designate which properties of the report you want to refresh from the Object Repository or the report stored in the BusinessObjects Enterprise system. If the report is linked to other reports in the system, the Links option is enabled. Clicking on Links brings you to a display of the managed links in this report object so that you can verify that the links are valid. The actual links should be managed within Crystal Reports.

Note

In the case of Web Intelligence documents, on the Properties tab, just below the word Properties, links to navigate to the Universe properties appear. The Universe properties include the Universe name and DSN connection name. Refresh Options and Links are not applicable to Web Intelligence documents.

Reviewing Report History

In addition to the Properties tab, several other tabs pertain to the report or document. The first is the History tab. The History tab, shown in Figure 27.18, displays all instances of the report, including completed instancessuccessful or otherwisepending (queued) instances, recurring instances, currently running instances, and paused instances. The BusinessObjects Enterprise administrator can use this screen to manage all instances of this report.

Figure 27.18. The History tab lists all instances and recurring schedules of the report.

Recall that a report instance is a version of the parent report that has been scheduled and run at a specific point in time. The instance might have certain parameters that were specified at the time of scheduling, so very few assumptions about the report instance can be made without verifying this information. Fortunately, BusinessObjects Enterprise stores the schedule time, scheduling user, start time, end time, and so on, as properties of the instance.

Note

Although the number of report objects and instances stored and managed within BusinessObjects Enterprise is, in theory, unlimited, the hardware dedicated to the CMS, CMS Database, and File Repository Server plays a major role in determining true system scalability.

To see the details of instances (shown in Figure 27.19), including error messages for failed instances, look at the instance status message on the History tab. To view the instance of the report, click the instance date/time stamp.

Figure 27.19. The instance's properties can be reviewed in the CMC.

The upper-right corner of the History tab displays a row of action buttons. These include the following:

• Run Now Schedules a new instance of the report for immediate processing.

• Pause Pauses, but does not cancel, processing of any selected pending or running instances.

• Resume Releases any selected paused instances so the report can continue processing.

• Send To... Sends the selected instance of the report to one of the supported destinations.

• Delete Permanently removes selected instances from BusinessObjects Enterprise.

• Refresh Refreshes the current view of available instances.

A large BusinessObjects Enterprise deployment might generate thousands of report instances every day. Over time, the accumulation of old report instances unnecessarily consumes system resources. BusinessObjects Enterprise has instance-limit controls for automatically managing the expiration (deletion) of old report instances. There is a global instance expiration setting in the Settings section of the CMC (discussed later in this chapter). The global expiration limits apply to all report instances in BusinessObjects Enterprise, unless the system administrator defines exceptions on a report-by-report basis.

If a report is scheduled and a format other than Crystal Reports is specified, it's still stored in the BusinessObjects Enterprise system as a report instance. This means that report instances could be Microsoft Excel spreadsheets, Word documents, and so on. BusinessObjects Enterprise provides a series of server plug-ins that enable objects to be stored in the system in any of the supported file formats.

Managing Object Limits

Exceptions to the global instance expiration limits are defined on the Limits tab for each report. The Limits tab, shown in Figure 27.20, enables the BusinessObjects Enterprise administrator to override the global or folder instance expiration limits for the current report only. This expiration limit can be based on the number of instances, the number of instances per individual user or group or by the age of instance.

Figure 27.20. The Limits tab can be used to configure report instance expiration rules for the current report object. Object-level expiration limits take precedence over folder and global limits.

In the upper-left corner of the Limits tab is a checkbox option to Delete Excess Instances When There Are More Than N Instances of an Object. You can use this option to trigger old report instances to be deleted when the specified threshold has been exceeded.

This setting applies to all users and user groups unless an exception is made in the Delete Excess Instances for the Following Users/Groups section of the Limits tab. The BusinessObjects Enterprise administrator can click the Add/Remove button in this tab to add overriding expiration limits for specific users or user groups. The user/group expiration limits take precedence over any global or folder expiration limits.

The Process Tab

Several subtabs exist within the Process tab. These subtabs allow you to set the options for how reports are processed.

Servers and Processing Options

Clicking on the Process tab navigates to the processing servers page. The Default Servers to Use for Scheduling area controls which server group executes the report.

Server groups are useful for categorizing servers by geographic region, function, processor speed or a combination of all these properties. The server group options are useful for ensuring that reports are executed on a BusinessObjects Enterprise Job Server that is in close physical proximity to the database server. For example, reports scheduled in Paris against the Paris sales database should be executed by a Job Server that is on the same network segment as the Paris database to maintain maximum report performance.

Server groups can also be used to direct high-priority reports to servers with the most processing power. For example, this option could be used to force the CFO's weekly financial reports to execute on the fastest server in the company. (A detailed discussion of server groups appears later in this chapter.)

The Use the First Available Server option is enabled by default and should remain enabled in most cases since it leverages the built in load balancing capabilities of the system. However, the administrator can direct BusinessObjects Enterprise to give preference a specific server group when possible by enabling the Give Preference to Servers Belonging to the Selected Group option. If this option is enabled, BusinessObjects Enterprise forces the report to execute on the first available Job Server in the group. If no Job Server is available, the report is executed by the first available Job Server outside the specified server group.

The option to Only Use Servers Belonging to the Selected Group causes the report to execute only on Job Servers within the specified group. BusinessObjects Enterprise queues the scheduled instances of the report for the first available Job Server in the specified group. If no server is available, the report remains in the queue until one becomes available.

Note

Be aware that the option to Only Use Servers Belonging to the Selected Group restricts BusinessObjects Enterprise's capability to intelligently designate a Job Server for the report, and might cause scheduled instances of the report to remain in the job queue longer than normal. Properly planning your particular needs is an important factor when enabling this feature.

In similar fashion, viewing and modification servers designate preferences for real-time viewing and report modification. Finally, default values on the PageServer and Report Application Server (RAS) regarding how often to refresh data versus caching can be overridden for any object, enabling you to tailor settings for more and less time-sensitive reports, for instance.

Database Settings

The Database subsection of the Process tab contains database logon information for the report, shown in Figure 27.21. Although the database information, such as server name, is stored in BusinessObjects Enterprise by default, database logon information is not stored and can only be added on this tab by the system administrator.

Figure 27.21. The Database subsection enables you to manage database logon information for the report object. Storing the logon information along with the report enables users to run the report without knowing a database username and password.

When a user attempts to run a report that does not already have database logon information provided, BusinessObjects Enterprise prompts the user to enter the database username and password. Note, however, if the BusinessObjects Enterprise administrator has already configured database logon information for the report, the user is not required to enter any additional passwords. This is the preferred method for running reports that do not rely on database-level security.

To configure database login information, click the Database link and highlight the report data source to configure first. All report data sources appear in the Data Source(s) list box. Most reports only have one data source; however, reports that contain subreports or multiple databases might have more than one data source. Note that each data source must be configured independently.

To store database logon credentials with the report, highlight a data source and fill out the database, logon name, and password for the data source. Remember to click the Update button to confirm the changes. If the report has multiple data sources, you are required to highlight each data source and provide the proper logon information. Database logon information is encrypted in the BusinessObjects Enterprise system database, and it cannot be accessed by end users, even by querying the system database directly.

Enabling the Prompt the User for New Value(s) When Viewing option causes BusinessObjects Enterprise to confirm the default database logon information each time the report is viewed.

If a database has changed, the Use Custom Database Logon Information Specified Here option should be checked, and the relevant information added. This feature enables flexibility in changing databases even after an object enters the BusinessObjects Enterprise system. Should batch maintenance of database connections be required, a script file can change these settings via the SDK. Please see Part VII, "Customized Report DistributionUsing BusinessObjects Enterprise and Crystal Reports Server," for more information.

Managing Object Parameters

The Parameters subsection options, shown in Figure 27.22, can be used to provide default values for parameters in the report. If no parameters exist in the report, the link to the Parameters subsection is disabled. Specifying default parameter values can reduce the number of steps required for a user to schedule a report. Of course, users can always override the default values if they want. To specify a default value for a parameter, click the parameter value listed in the Value column. Unspecified values are indicated as [EMPTY].

Figure 27.22. The Parameter subsection can be used to store default values for report parameters. Users have the capability to override the default values with their own values.

The BusinessObjects Enterprise administrator might select a default value for a parameter from the drop-down list of default parameter values (see Figure 27.23). The values that appear in the drop-down list were provided at the time of report creation in Crystal Reports or are gathered from the list of parameter values generated by the List of Values server. If the desired values do not appear, the BusinessObjects Enterprise administrator can type a new value by clicking the Edit button. Certain types of parameters, such as range parameters, can accept both a beginning and ending default value.

Figure 27.23. A default value for a parameter can be specified. Range parameters can have default values for both beginning and ending values.

The Clear the Current Parameter Value(s) option erases the parameter's current default values, while the Prompt the User for New Value(s) when Viewing option ensures that users are reminded to confirm or modify the default parameter values each time the report is run. Any changes made to the Parameters area must be confirmed by clicking the Update button.

The benefit of using parameters with reports in BusinessObjects Enterprise is that the user is prompted for value entry if the report is run or scheduled. No special programming is required, regardless of the report viewer in use.

Filters

The Filters subsection enables you to set the default record selection expression for the report, shown in Figure 27.24. The default record selection is normally adopted from the original report file. In most cases, the default selection expression should be left intact, but it can be useful to override this feature for specific purposes. With a proper understanding of Crystal syntax, you can modify the Record Selection Formula or Group Selection Formula manually.

Figure 27.24. The Filters subsection can be used to override the report's preconstructed record selection expression. You need a solid understanding of Crystal Reports record selection expression syntax to modify the default filter.

At the bottom of the Filters tab is a section for indicating which Processing Extensions the report uses. A Processing Extension, discussed in Chapter 25, "BusinessObjects Enterprise Architecture," is an optional programmatic library for controlling the display of report data. Processing Extensions were new to Crystal Enterprise 8.5 but are now largely superseded by Business Views in BusinessObjects Enterprise XI. (Refer to Chapter 18, "Using a Semantic LayerBusiness Views and Universes," for a complete discussion of Business Views.)

Print Setup

Print settings for a report are managed through the Print Setup subsection of Process tab. BusinessObjects Enterprise XI enables you to print the scheduled report by checking the Print in Crystal Reports Format option and specifying the details on the printer. Note that the printing occurs from the Job Server, so any network and other permissions must be configured on the appropriate Job Server(s). Note that this modality allows the job to be scheduled to the printer and a destination in the same run, thereby letting you schedule to an archiving system, for instance, which has a printer driver as its front-end image acquisition method.

Note

In versions prior to Crystal Enterprise 10, the print settings were managed in the Destinations area.

The bottom of this section enables you to set whether you want to use the print options stored in the report itself during report creation, the default printer options, or set custom options for that object.

A new feature in this release is the ability to specify the report's page layout from within the BusinessObjects Enterprise environment instead of exclusively through the Crystal Reports designer and SDKs. The printer settings can be determined from the report definition, or the administrator can override the report definition and use specified settings from a particular printer or custom printer settings. The available custom settings include the ability to change orientation, paper size, and page width and height. This allows for greater control on the printed output of the scheduled report.

Note

For Web Intelligence documents, the Process tab provides the capability to define the default server properties and the capability to administer any associated prompts for the Web Intelligence document. Database, Parameters, and Filters are inherent in the Universe and document definitions therefore are configurable via the CMC.

Managing Object Processing Schedules

The Schedule tab enables you to schedule the report to run at selected times (see Figure 27.25). The CMC provides this feature as a matter of convenience so the administrator doesn't have to refer to InfoView for scheduling. When scheduling a report, the number of retries allowed (and the retry interval in seconds) can be specified before the report instance is marked as failed.

Figure 27.25. The Schedule tab provides the same report scheduling functionality as the Web Desktop.

The calendar option sets the recurrence of the schedule based on calendars stored in the system. A fuller discussion of calendars follows later in this chapter.

Notification

BusinessObjects Enterprise XI offers two methods of notification around specific jobs, in addition to the general audit logging options available in the system. The notification can audit on successful and failed jobs, and e-mail notification can also be sent, perhaps to an administrator's pager to call attention to a particular failure or success.

Alert Notification

Many organizations today work to streamline management practices and manage against goals. Thus management by exception increases daily in popularity. To fulfill the potential of this method, BusinessObjects Enterprise sends e-mails when alerts have been triggered on reports, enabling users to receive notification when measured values are out of bounds and trigger a report alert, making it simple to manage actual results in real-time. Note that a link back to the triggering report can be composed at the bottom of the screen.

For a description of how to create alerts in reports, p. 273.

Destinations

BusinessObjects Enterprise XI supports scheduling to destinations. You can specify a default destination, shown in Figure 27.26, for the report output on the Destination sub area. The default destination is the BusinessObjects Enterprise FRS. This is generally the preferred destination for all report instances because the report maintains its status as a managed object within BusinessObjects Enterprise. New in this release is an additional destination known as an Inbox. This also retains the instance with BusinessObjects Enterprise FRS, but is directed to individual users or groups on the system, either as a copy or a shortcut.

Figure 27.26. Destinations enable you to specify a default output location for all new scheduled instances of the report. Supported destinations include network shares, FTP, and SMTP e-mail and Inbox.

The administrator can configure BusinessObjects Enterprise to output the report's instances to a network folder using the Unmanaged Disk option, for example. BusinessObjects Enterprise also supports FTP (File Transfer Protocol), which is useful for transmitting the report instances to a remote destination, such as an archiving system. Another option, Email (SMTP) is a popular solution for distributing reports as an e-mail attachment. New in BusinessObjects Enterprise XI is the ability to schedule to Inboxes. Inboxes are managed by BusinessObjects Enterprise and are associated to an individual user's ID. A good example of this feature in action is scheduling the Monthly Profit and Loss Summary report to be sent to the Inbox of a finance officer.

Note

The BusinessObjects Enterprise Job Server must have a destination enabled for destination scheduling features to work. Job Server destinations are configured from the Servers section of the CMC. Configuring Servers is discussed later in this chapter in the "Managing BusinessObject Enterprise Servers" section.

Determining Report File Formats

Not to be confused with the format or look and feel of a report, report formats imply a file format. The Format subsection, shown in Figure 27.27, enables you to specify a default output format for the report. Keep in mind that certain cosmetic report formatting features might not be supported by every export format. Also, proprietary Crystal Report features, such as drill-down and on-demand subreports, are supported only in the native Crystal Report format. These special features are ignored when exporting a report to a non-Crystal format.

Figure 27.27. Use the Format subsection to specify the default output format for the report. Popular output formats include but are not limited to Excel, Adobe Acrobat PDF, Word, and CSV (Character-Separated Values).

Scheduling for Particular Users or Groups

New in BusinessObject Enterprise XI is the ability to schedule a report for particular users or groups. The default setting is to schedule the instance only for the user scheduling the report. Alternatively, the user can schedule the report for specified users and/or groups.

Assigning Objects to Categories

The Categories tab allows administrators to assign a report to categories or to remove a report from a category. Categories are a new feature in BusinessObjects XI. In contrast to the folder hierarchy model where the parent-child relationship is absolute, a report can be assigned to multiple categories. This allows the end user to view a collection of objects in a single view even if they exist in multiple folders, thus providing an endless number of combinations of objects.

The Categories tab has two subareasCorporate and Personal. In the upper-right of the Categories tab is an Assign Categories button. When assigning an object to Corporate Categories, a list of all corporate categories is displayed. Moving an available category from the Available Categories list to the Assigned Categories list and clicking OK adds an object to the selected categories. When assigning an object to Personal Categories, the process is similar, except that the administrator is presented with a list of all users, as shown in Figure 27.28. When a particular user is selected from the Users list, the user's personal categories appear in the available or assigned categories list.

Figure 27.28. Reports can be assigned to both Corporate and Personal categories.

Tip

The administrator can leverage the view of personal categories for a specific report to determine if additional corporate categories might help to serve the user community in a more effective way. By using a heuristic approach to defining categories, the overall effectiveness of the BI system is improved.

Object Rights

The Rights tab, shown in Figure 27.29, is used to grant report access/restrictions to different users and user groups. By default, report objects inherit the same rights as their parent folder.

Figure 27.29. Report privileges are assigned on the Rights tab. The BusinessObjects Enterprise administrator can use rights to define permissible actions for each user and user group.

Tip

Much like managing groups is more effective than managing individual users, it's much easier to set restrictions for those groups by folder rather than by report objects themselves.

The Rights tab lists all the users and groups with permissions explicitly defined for the current report object. Note that if a group is not listed, permissions have not been defined for the group.

The Everyone group and the Administrators group are automatically attached to all new objects and folders in the system, and cannot be removed. Note that the rights build on each other: A lower bullet in this list includes the rights above it.

Each user or group can be assigned one of the following rights:

• Inherited rights The user or group inherits the parent folder's rights. This is the default setting for all new objects.

• No access The user or group is not aware of the object's existence. Note that this setting also would hide this object from any delegated administrators based on the new delegated administration feature.

• View This setting enables the user or group to view instances scheduled by other users. On-demand viewing and scheduling is not available.

• Schedule Allows the scheduling of the object as well as the previously listed rights.

• View on demand The user or group has View rights in addition to the capability to run the report on demand.

• Full control The user or group is granted all privileges except the capability to delete, hold, and release their own instances.

• Advanced This option enables you to set detailed, specific permissions for the user or group, and is generally reserved for only the most complex security models.

In most organizational security models, the Everyone group is assigned the No Access privilege, or the parent folder's permissions are set to No Access for the Everyone group. Doing so prevents users from accessing an object unless access is specifically granted through another user group.

Permissions in BusinessObjects Enterprise are cumulative. In other words, the net rights of a user are equal to the sum of the permissions granted to the user. To further clarify this point, consider the permissions scenario in Table 27.1.

Table 27.1. Deriving Net Sales Folder Permissions from Group Membership

Group	Folder	Assigned Rights
Everyone	Sales	No Access
Sales	Sales	Run
Management	Sales	Full Control

Because permissions are cumulative, the net rights of each user are equal to the sum of the rights assigned to each group to which the user belongs (see Table 27.2).

Table 27.2. Group Memberships and Their Net Permissions for the Sales Folder

User	Everyone	Sales	Management	Net Permissions
Navar	X	X	X	Full Control
Garbo	X			No Access
Kevvan	X	X		Run
Arsel	X		X	Full Control

A user's net permissions are determined by combining the rights they inherit from their group memberships. By combining permissions derived from group memberships, BusinessObjects Enterprise enables a user to have access to the Sales folder as long as at least one of their group memberships permits it. Table 27.2 illustrates why the user Navar is allowed Full Control of the Sales folder, even though the Everyone group is denied access as defined in Table 27.1.

Deciphering a user's net permissions can be tricky. In the XI release, the Check User Rights action button has been added to the object's Rights tab. This allows an administrator to select a user or group from a list and display the inherited, explicit, and net permissions for each object.

Different Object Types

BusinessObjects Enterprise XI includes support for several object types (refer to Figure 27.15 for a complete list). Note that each of these objects has more or fewer configuration areas depending on the inherent type of object. For instance, a program object can be scheduled, while a Word document cannot.

Managing Folders

Without exception, each report object in BusinessObjects Enterprise must reside inside a folder. A folder in BusinessObjects Enterprise is analogous to a folder on a Windows-based workstation or server. Many objects can populate a single folder, and folders can be nested inside other folders.

In general, the BusinessObjects Enterprise folder hierarchy and report management behaves just like a standard network file system. The difference between the folder hierarchy in BusinessObjects Enterprise and a standard network folder hierarchy is that any information about the folders is stored in the BusinessObjects Enterprise system database, which can be queried to retrieve object information.

You can access folder management tasks by selecting Folders from the CMC's drop-down menu and clicking Go. The Folders screen in Figure 27.30 appears with a listing of all top-level folders in the folder hierarchy tree. You can click a folder name to see a list of all the reports the folder contains.

Figure 27.30. The Folders screen displays all top-level BusinessObjects Enterprise folders. You can navigate to the entire folder hierarchy from here or search for particular folders.

Note

The Users folder contains a private subfolder for each BusinessObjects Enterprise user. These personal folders store users' favorite reports, if an application such as InfoView allows for it.

To add a new top-level folder, click the New Folder button. On the Properties tab, shown in Figure 27.31, type the folder name. The folder name can include spaces and should be descriptive for end users because they often navigate folders themselves. The BusinessObjects Enterprise administrator can also type a freeform description. Keywords can be associated with a folder to facilitate finding groups of reports based via the search mechanism. After entering a new folder name and any description or keywords, click the OK button to commit the change to the system database. Four additional tabs for configuring the folder are now available.

Figure 27.31. From the New Folder screen you can create a new folder, add reports and subfolders, specify instance expiration limits, and set folder rights.

Adding Objects to Folders

Use the Objects tab, shown in Figure 27.32, to add new objects to the folder or copy, move, shortcut, and delete objects. Administrators often also use folders to navigate to objects via this route.

Figure 27.32. The Objects tab is used to add new reports to a folder. You can also manage existing objects from this screen.

Note

The Copy function duplicates an object and assigns the duplicate object a slightly different filename on the FRS; the Shortcut function creates a duplicate report listing that points to the same filename on the FRS (similar to Windows file shortcuts). The Move function relocates the report to another folder.

The Subfolders tab in Figure 27.33 enables you to create and manage subfolders of the current top-level folder. Subfolders are useful for subcategorizing reports. Each subfolder can also have one or more child folders. Like a file system, the nesting of folders can traverse as many levels as necessary to convey the hierarchy of an organization.

Figure 27.33. You can use the Subfolders tab to add one or more subfolders to a top-level folder. In turn, each subfolder can have one or more subfolders (nested subfolders).

Folder Limits

The Limits tab, shown in Figure 27.34, controls instance expiration limits for reports contained within the folder. Note that report object limits (if specified) take precedence over folder limits. Folder limits only take precedence over global limits.

Figure 27.34. Like report objects, folders can be configured to override the global instance expiration limits.

Note

Report object limits take precedence over folder limits, and folder limits take precedence over global limits.

The Rights tab, shown in Figure 27.35, is used to control access to objects. The rights provided at the folder level are the same as those provided on the object level. (Refer to object rights for a definition of each option.) Instead of trying to manage rights for each individual report object, it's usually easier to secure reports by specifying rights at the folder level only. Report objects always inherit the rights of their parent folder, unless exceptions are configured at the object level shown in Figure 27.34.

Figure 27.35. Any rights specified on the Rights tab are inherited by new objects. Unless an object has object-level rights specifically configured, it inherits the rights of its parent folder.

Note that with the addition of Delegated Administration, the CMC hides folders depending on folder rights. For instance, if an HR analyst logs on to the CMC, he does not see the Sales folder if the Sales folder Rights are set to disallow the HR analyst view rights. If a user doesn't have folder rights, he doesn't see any Folder information at all.