http://blog.libinuko.com/2010/04/11/sharepoint-2010-howto-configure-business-data-connectivity-access-rights/