Custom app working with CRE 8.5, not working after migration to BOE XI

Question

Hello,
I have this custom legacy app coming from way back in time, which -among other things- connects to a CRE 8.5 APS to get the list of available reports and the rights of a given user over those reports (view instances, request on demand, and so on). The logic of this custom application works quite well, though it's a bit cryptic (to me at least).
Now, I have the task of migrating the app from CRE 8.5 to BOE XI R2. The migration itself was rather easy, thanks to the migration wizards, and all the users, groups, permission settings, and everything else seems to have been properly replicated in the BOE XI CMS. However the custom app is not working so well after the migration: it can retrieve all the info about the reports and do pretty much the same it was doing before the migration, but when it comes to user's security settings (permissions to see or request a given report) the app just can't get the proper info.
To properly explain what's going on, I will have to go into detail with some lengthy description of the code.
Here it goes. This is the (partial) code that queries if a given user (UserID) has permission to view and/or request on demand a set of reports in the server:
Qry2 = "Select SI_ID, SI_NAME From CI_INFOOBJECTS"
  Qry2 = Qry2 & " Where SI_PROGID = " & "'" & "CrystalEnterprise.Folder" & "'" _
         & "and SI_PARENT_FOLDER in " & GetFirstLevelFolder(iStore, FolderProperty)
  Set varFolders = iStore.Query(Qry2)
  For Each Item In varFolders   'First level displayed folder
      Set infoSLevelFolders = GetSubfoldersByParentID(iStore, Item.ID) 'Second level displayed folders
      intFolderRightsCount = GetRightsCount(iStore, UserID, Item.ID)
      For Each infoSLevelFolder In infoSLevelFolders
           Set infoReports = GetReportsByFolderID(iStore, infoSLevelFolder.ID)
           For Each infoReport In infoReports
                  rsOutput.AddNew   'Set output recordset fields
                  rsOutput.Fields("FOLDERID") = Item.ID
                  rsOutput.Fields("FOLDERNAME") = Item.Title
(not sure why, but the message won't accept more text than the above... I will have to post a second message with the rest of it)
Edited by: Marcelo Rybertt on Mar 30, 2010 8:39 PM
Edited by: Marcelo Rybertt on Mar 30, 2010 8:49 PM

Answer 1

                  rsOutput.Fields("FOLDER2ID") = infoSLevelFolder.ID
                  rsOutput.Fields("FOLDERNAME2") = infoSLevelFolder.Title
                  rsOutput.Fields("REPORTID") = infoReport.ID
                  rsOutput.Fields("REPORTNAME") = infoReport.Title
                  If UserID = 0 Or intFolderRightsCount > 1 Then 'no this user or rights on the folder level
                     rsOutput.Fields("ROD") = False
                     rsOutput.Fields("VRI") = False
                  Else
                     intReportRightsCount = GetRightsCount(iStore, UserID, infoReport.ID)
                     If intReportRightsCount = 4 Then
                        rsOutput.Fields("ROD") = False
                        rsOutput.Fields("VRI") = True
                     ElseIf intReportRightsCount = 5 Then
                        rsOutput.Fields("ROD") = True
                        rsOutput.Fields("VRI") = False
                     ElseIf intReportRightsCount > 5 Then
                        rsOutput.Fields("ROD") = True
                        rsOutput.Fields("VRI") = True
                     Else
                        rsOutput.Fields("ROD") = False
                        rsOutput.Fields("VRI") = False
                     End If
                 End If
           Next
     Next
  Next
I have two scenarios, for the same user. The first scenario is the custom app working against a CRE 8.5 server. The second scenario is the same app against a BOE XI server, and the data in that server is the result of running the import wizard, using the 8.5 server as the source of data. The app was done with VB6, and the only difference between working against 8.5 or XI, is the set of dll's used in each case (code compiles flawlessly with either set of libraries).
ROD stands for Request On Demand. True means the user can ROD. False, the user can't.
VRI stands for View Report Instance. Same deal.
intFolderRightsCount and intReportRightsCount are both calculated from the GetRightsCount function, like this:
Set iReports = iStore.Query("Select SI_ID From CI_INFOOBJECTS Where SI_ID=" & REPORTID)
u2026
Set principal = iReport.SecurityInfo.AnyPrincipal(UserID)
u2026
GetRightsCount = principal.Rights.Count
(again, same issue with the message... need to continue this in a third -and last I hope- post)