Secure SAP BusinessObjects Timesheet Application for a Claims Management Company

Summary

INNERLUXES built a secure, mobile-enabled SAP BusinessObjects timesheet application with automated reporting, offline synchronization, and role-based data access controls.

The Client — A Global Claims Management Organization

The Client is a global claims management organization that helps insurance companies, corporations, public entities, and brokers manage and control complex claims worldwide. Its service portfolio spans property adjusting, marine claims, TPA services, overseas travel, accident claims, and international claims management. To meet the demands of a modern, mobile workforce and accelerate its digital transformation, the organization partnered with INNERLUXES to modernize its legacy timesheet infrastructure with a secure, mobile-ready solution powered by SAP BusinessObjects.

Business Challenge

The Client's existing timesheet system was outdated, lacked mobile accessibility, and offered no secure mechanism for capturing, managing, or distributing employee time data. Specifically, the Client needed:

• A modern, mobile-compatible timesheet interface with offline capability.
• Secure user authentication and role-based data access.
• Automated generation and distribution of timesheets as Excel reports via email.
• The ability to view, edit, delete, and resubmit timesheet entries.
• A real-time timer to track task durations with precision.
• Periodic data synchronization between mobile devices and the server.

How INNERLUXES Approached the Project

INNERLUXES designed and delivered a full-stack, enterprise-grade SAP BusinessObjects timesheet application. The solution combined a cross-platform mobile front end, a secure WCF services back end, and a robust SQL Server database, all orchestrated through a clean MVC three-tier architecture.

Core application features:

• Dual-factor authentication with an OTP screen for verified user access.
• Built-in timer module for precise task-duration tracking.
• Add Timesheet: work codes, date, file number, insured hours, and descriptions.
• Save, view, edit, and delete timesheet entries with full audit trails.
• Submit and resend timesheets with one-tap convenience.
• Automated Excel sheet generation from submitted timesheet data.
• Email notifications and report distribution to relevant stakeholders.
• CSV export via email for downstream reporting and analytics.
• Periodic background data sync between SQLite local storage and SQL Server.
• Quick-select panel to reuse any of the last four submitted timesheet values.

Technology Stack

• UI: XAML
• Language: .NET C#
• Front End: Xamarin Forms Portable
• Back End: WCF Services
• Database: SQL Server 2012 R2
• Web Server: IIS (Internet Information Services)
• Architecture: MVC / Three-Tier (UI, Business, Data)
• Local Storage: SQLite (mobile offline capability)

Enterprise-Grade Security for BusinessObjects Content

Security was a foundational requirement of this engagement. INNERLUXES implemented a comprehensive, layered security framework within the SAP BusinessObjects environment — covering both functional access and data-level governance.

Functional security — controls governing the ability to view, refresh, or schedule documents, configured manually by the BusinessObjects administrator so users can only access the actions their role permits, with no dependency on direct database integration.

Data security — two mechanisms enforce data-level access controls:

• Publication-based security: controls report delivery during scheduling. Reports sent as Web Intelligence documents let recipients view and refresh their authorized data (though this does not support direct on-demand access via the BI Launchpad).
• Row-level & column-level security (RLS/CLS): an always-on mechanism configured once at the Universe level in Universe Designer. RLS restricts the data visible to each user or group (effective for region- and country-level segmentation), while CLS restricts sensitive columns such as Social Security Numbers. Both static and dynamic configurations are supported.

Report folders were structured with a clear, hierarchical taxonomy to streamline report discovery for end users while simplifying security administration and governing report publishing and access permissions at scale.

Outcomes & Business Impact

• Accurate time-in / time-out recording for every employee, with detailed identifiers and descriptions.
• Full lifecycle management of timesheets — save, view, edit, delete, and submit — all from a mobile device.
• Automated Excel and CSV report generation, reducing manual effort in report distribution.
• Secure, role-based data access ensuring every user sees only the information they are authorized to view.
• Periodic data synchronization delivering consistently up-to-date records across all devices and the central server.
• Improved compliance posture through structured audit trails and column-level data masking.

Technologies and Tools

SAP BusinessObjects, XAML, .NET C#, Xamarin Forms Portable, WCF Services, SQL Server 2012 R2, IIS, SQLite, MVC three-tier architecture.