
Hello Everyone:
I have on User that can not revise a Quote that is not theirs.
They have full rights for Accounts, Opportunities, and Quotes
I get this error
Here is the Log file info.
<s:Envelope xmlns:s="schemas.xmlsoap.org/.../envelope"><s:Body><s:Fault><faultcode>s:Client</faultcode><faultstring xml:lang="en-US">SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 1780b2ff-6a68-e511-80eb-c4346bac3298, OwnerId: 0ca619f3-59b6-e211-9a5d-78e7d162cec6, OwnerIdType: 8 and CallingUser: 1f9d399d-584f-e411-875a-6c3be5a8ad3c. ObjectTypeCode: 1084, objectBusinessUnitId: d516bc7b-4660-e211-a852-78e7d1620f5e, AccessRights: 524296 </faultstring><detail><OrganizationServiceFault xmlns="schemas.microsoft.com/.../Contracts" xmlns:i="www.w3.org/.../XMLSchema-instance"><ErrorCode>-2147220891</ErrorCode><ErrorDetails xmlns:a="schemas.datacontract.org/.../System.Collections.Generic"><KeyValuePairOfstringanyType><a:key>OperationStatus</a:key><a:value i:type="b:int" xmlns:b="www.w3.org/.../XMLSchema">0</a:value></KeyValuePairOfstringanyType><KeyValuePairOfstringanyType><a:key>SubErrorCode</a:key><a:value i:type="b:int" xmlns:b="www.w3.org/.../XMLSchema">-2146233088</a:value></KeyValuePairOfstringanyType></ErrorDetails><Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 1780b2ff-6a68-e511-80eb-c4346bac3298, OwnerId: 0ca619f3-59b6-e211-9a5d-78e7d162cec6, OwnerIdType: 8 and CallingUser: 1f9d399d-584f-e411-875a-6c3be5a8ad3c. ObjectTypeCode: 1084, objectBusinessUnitId: d516bc7b-4660-e211-a852-78e7d1620f5e, AccessRights: 524296 </Message><Timestamp>2015-10-01T18:34:16.9441571Z</Timestamp><InnerFault><ErrorCode>-2147220891</ErrorCode><ErrorDetails xmlns:a="schemas.datacontract.org/.../System.Collections.Generic"><KeyValuePairOfstringanyType><a:key>OperationStatus</a:key><a:value i:type="b:int" xmlns:b="www.w3.org/.../XMLSchema">0</a:value></KeyValuePairOfstringanyType><KeyValuePairOfstringanyType><a:key>SubErrorCode</a:key><a:value i:type="b:int" xmlns:b="www.w3.org/.../XMLSchema">-2146233088</a:value></KeyValuePairOfstringanyType></ErrorDetails><Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 1780b2ff-6a68-e511-80eb-c4346bac3298, OwnerId: 0ca619f3-59b6-e211-9a5d-78e7d162cec6, OwnerIdType: 8 and CallingUser: 1f9d399d-584f-e411-875a-6c3be5a8ad3c. ObjectTypeCode: 1084, objectBusinessUnitId: d516bc7b-4660-e211-a852-78e7d1620f5e, AccessRights: 524296 </Message><Timestamp>2015-10-01T18:34:16.9441571Z</Timestamp><InnerFault><ErrorCode>-2147220891</ErrorCode><ErrorDetails xmlns:a="schemas.datacontract.org/.../System.Collections.Generic"><KeyValuePairOfstringanyType><a:key>OperationStatus</a:key><a:value i:type="b:int" xmlns:b="www.w3.org/.../XMLSchema">0</a:value></KeyValuePairOfstringanyType><KeyValuePairOfstringanyType><a:key>SubErrorCode</a:key><a:value i:type="b:int" xmlns:b="www.w3.org/.../XMLSchema">-2146233088</a:value></KeyValuePairOfstringanyType></ErrorDetails><Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 1780b2ff-6a68-e511-80eb-c4346bac3298, OwnerId: 0ca619f3-59b6-e211-9a5d-78e7d162cec6, OwnerIdType: 8 and CallingUser: 1f9d399d-584f-e411-875a-6c3be5a8ad3c. ObjectTypeCode: 1084, objectBusinessUnitId: d516bc7b-4660-e211-a852-78e7d1620f5e, AccessRights: 524296 </Message><Timestamp>2015-10-01T18:34:16.9441571Z</Timestamp><InnerFault i:nil="true"/><TraceText i:nil="true"/></InnerFault><TraceText i:nil="true"/></InnerFault><TraceText>
[Microsoft.Crm.ObjectModel: Microsoft.Crm.ObjectModel.SyncWorkflowExecutionPlugin]
[42f615a4-9f5c-e511-80ee-c4346bac124c: ]
Starting sync workflow 'Owership Quote', Id: 3bf615a4-9f5c-e511-80ee-c4346bac124c
Entering AssignStep1_step:
Sync workflow 'Owership Quote' terminated with error 'SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 1780b2ff-6a68-e511-80eb-c4346bac3298, OwnerId: 0ca619f3-59b6-e211-9a5d-78e7d162cec6, OwnerIdType: 8 and CallingUser: 1f9d399d-584f-e411-875a-6c3be5a8ad3c. ObjectTypeCode: 1084, objectBusinessUnitId: d516bc7b-4660-e211-a852-78e7d1620f5e, AccessRights: 524296 '
</TraceText></OrganizationServiceFault></detail></s:Fault></s:Body></s:Envelope>
*This post is locked for comments
I have the same question (0)Hi _damon,
It looks like your synchronous workflow 'Owership Quote' is failing and throwing the exception. Deactivate the workflow to verify, but I'm pretty sure that'll get rid of the error for the user.
As for what's causing the workflow to fail, that could be difficult to narrow down with CRM Online since you can't use the tracing tools. The tried and true (and tedious) way to do it is to scale down the workflow until it works and narrow down the step that's causing a problem. It's definitely an error with user ID '1f9d399d-584f-e411-875a-6c3be5a8ad3c' updating a record owned by '0ca619f3-59b6-e211-9a5d-78e7d162cec6'. Those are probably the IDs of the two users you expect them to be, but you should still check.
Another thing that could be causing the issue is if the workflow makes a update that's fine, but that triggers a plugin which is doing something the user doesn't have access to. The exception is referencing object type code 1084 (Quote), so maybe the plugin is running as a user who doesn't have permissions to the quote owned by the user.
If this helps I'd appreciate if you would mark this as the verified answer. If you get any more details on the issue I'd be happy to take another look with you.
Thanks,
Aiden