Say I have a group in dynamics CRM for project managers, which cannot see financial data in the platform (for example: the value of opportunities, quotes, etc).

However I want to create a report to allow projects managers to see some data which can be found inopportunities such as: start date, end date, date of contract signed, assigned consultant, etc.

Problem is that although I can create the report, the users from the project manager group wouldn't be able to execute the report because it tries to access data that (i.e.: opportunities) that project managers have no access to.

In simple terms, I would like my project managers to see some data from the opportunities entity through reports, even though they don't have direct access to the opportunities entity.

This could be easily resolved with the use of a security layer to access the data (i.e.: like Business Object Universe: http://hubpages.com/hub/BusinessObjects_Universe)