Dynamics 365 general forum

Ms dynamics restrict records

(0) Share

Report

Posted on by msboy

140

Hey Guys so I having an issue with dynamics security role so here is business process

I have two people with different security role one is a worker one is a supervisor

The worker has access to an entity to create read-write append share

the supervisor has access also to that same entity but on a user level

so when a worker creates a record the supervisor should not be able to see it unless it has been assigned to him/her

but for some reason which I need help with the supervisor is seeing the record that was created regardless if it has been assigned to him or not and

I gave the security role privilege for officer and supervisor of that entity on the user level

so one should not see the other records right

I dont what is causing it to work like this please help

also, supervisors belong to teams and officer are not on the same team as them

Categories:

Customization / Solutions / SDK and API

All responses (12)

Answers (0)

msboy 140 on at

Like (0)

Report

RE: Ms dynamics restrict records

so I did not attach this workflow to the bpf process flow even though it is its primary entity is bpf process flow
Suggested answer

Kokulan 18,048 on at

Like (0)

Report

RE: Ms dynamics restrict records

Hi

I can see that your workflow triggers on a Business Process Flow - Applied and Process Change.

I would suggest for test purpose you convert your workflow to the background so that you can see all the logs and steps executed.

It looks like the Workflow is triggered when the BPF stage entry or exit.

alexmscrm.blogspot.com/.../dynamics-365-workflow-within-business.html

Could you open your Business Process Flow in the designer and check when this workflow is being called, is it at the Stage entry or Exit. I would also check if there are scripts that switch BPF as that could trigger the workflow as its Applied event.
msboy 140 on at

Like (0)

Report

RE: Ms dynamics restrict records

The process session and audit history has no data
msboy 140 on at

Like (0)

Report

RE: Ms dynamics restrict records

so first we are sharing it with the user the officer selects and then the team, they belong in

and the condition is stage change and if two other field contains data
msboy 140 on at

Like (0)

Report

RE: Ms dynamics restrict records

ok will do that
Suggested answer

Kokulan 18,048 on at

Like (0)

Report

RE: Ms dynamics restrict records

Could you share a screen grab please, I might be able to see why it's still sharing it?

I would also enable auditing on the entity to help investigate at what point the workflow actually triggers.
msboy 140 on at

Like (0)

Report

RE: Ms dynamics restrict records

so workflow that shares the record is only triggered when the stage changes and if two other fields have value it's not triggered in draft
Suggested answer

Kokulan 18,048 on at

Like (0)

Report

RE: Ms dynamics restrict records

Ok that's helpful at least we can isolate the issue now. I think you need to check workflows or plugins that could be sharing the record with supervisor and the team
msboy 140 on at

Like (0)

Report

RE: Ms dynamics restrict records

Yes the list has the team and supervisor it was shared with
Suggested answer

Kokulan 18,048 on at

Like (0)

Report

RE: Ms dynamics restrict records

If this only happens on status change I would first check if there are any plugins or workflows that could be sharing the record.

When the supervisor is able to see the record could you click on share and see if the list has the supervisor