Flash security issue; Error #2170, crossdomain.xml

Hi,

we are using Xcelsius 2008, SP3, together with BO XI 3.1 SP2 (Edge; Linux) and SAP BW.

We have build a dashboard using Query as a Web Service as datasource (pointing to a SAP BW query).

When we export the Xcelsius file to the BO repository and run the file from InfoView (or CMC), we get a #2170 error.

The resolution seems to create a crossdomain.xml file so that Flash Player doesn't block the execution of the file any more.

Do I have to place this crossdomain.xml file on Tomcat (BO) or SAP BW (transaction SICF)? Are there other solutions for this problem?

Thanks!