Understanding the SAP BusinessObjects security model