There are a number of permissions that are set while working with groups in BusinessObjects.
VIEW privileges are assigned to the CLIENTENV folder.
NO_ACCESS privileges are assigned to all organization subfolders of the CLIENTENV folder to which the group does not belong.
If you assign a privilege to a TRS report (batch and online), a role is assigned to a group for that particular report.
When dealing with online reports, the Run privilege can be assigned. If set, the group has a VIEW_ON_DEMAND role for that report. Otherwise, if it is not set, it has a NO_ACCESS role for the report.
When dealing with batch reports, there are three different options:
SUBMIT is set and PREVIEW can be either set or not set; in this case, the group inherits the VIEW_ON_DEMAND role for the report.
SUBMIT is not set and PREVIEW is set; in this case, the group inherits the VIEW role for the report.
Both SUBMIT and PREVIEW are not set; in this case, the group inherits the NO_ACCESS role for the report.
See Also: Default Permissions