Hi,
the RFC User only comes into action when an authentication process happens. Lets make it simple. When a User logs into BOBJ with his SAP Account, this RFC User entered in the Entitlement Systems, is the one who contacts the BW and checks if the User/pass is correct...which Role membership the user has etc.
It comes not into action when the User fetches the reporting Data. The User will only see the Data in his Crystal Report where he is authotized on in BW.
In order to get the last Workflow completing successfull you have to set the CR to use SSO. Logon to the CMC -> Folders -> Navigate to the Report -> right- click -> Database Configuration -> Seöect the following
Hope this finally clarifies it.
Regards
-Seb.