Notes "delete" permission

(0) Share

Report

Posted on by Community Member

I removed the "delete" permission on the Core Entity "Note" and also on the parent entity "Case" and another custom entity on custom role, but when I login as this role I can still delete the attachment from the Notes.

What else I need to do?

Thanks,

*This post is locked for comments

I have the same question (0)

All responses (9)

Answers (2)

Suggested answer

Mahadeo Matre 17,021 on at

Like (0)

Report

Hi,

Is this user is a member of any team also?

If user is member of any team and that team has delete permission, then user will get delete permission.

Was this reply helpful? Yes No
Suggested answer

PS 23,577 on at

Like (0)

Report

Removing delete privilege from notes itself will stop users from deleting notes & attachments. If you are still able to do that, it means either you are having more than two security roles, one of which allows to delete or you are part of a Team. Please check and let us know.

Was this reply helpful? Yes No
ScottDurow 21 on at

Like (4)

Report

Removing an attachment is actually an update rather than a delete on a note- so you would need to remove update permissions.

Was this reply helpful? Yes No
Suggested answer

Yadnyesh Kuvalekar 4,102 on at

Like (3)

Report

Hi Alexa,

In CRM, attachments on the notes are stored in the documentbody field of note entity. Hence, even if you remove delete permission on note entity, you can still delete attachments (Deleting an attachment on note removes data from documentbody field of note entity). Hence, if you restrict update operation on note entity, then irrespective of delete permission, user will not be able to delete attachment on note entity.

Also, if you are still able to delete attachment after removing update rights, then please check below:

1. User does not have any other security role which allows update on note entity.

2. User is not in a team which has assigned a security role which allows update on note entity.

Thanks and Regards,

Yadnyesh Kuvalekar

Tick verify answer if this resolves your query.

Was this reply helpful? Yes No
Suggested answer

Community Member on at

Like (0)

Report

Hello Yadnyesh,

I removed the "update" permission from the single user role on the "notes" entity. The role does not belong to any other team nor has any other role assigned.

I can still see the "X" delete image next to the attachment. When I click on the "X" the message below is displayed. However, the attachment does not get deleted.

Is there a way of displaying some other user friendly message to the users?

Thanks,

Alexa

Was this reply helpful? Yes No
Verified answer

Yadnyesh Kuvalekar 4,102 on at

Like (0)

Report

Hi Alexa,

Can you send the screenshot where you are seeing X image? Because if you don't have update privilege on Note entity, then you don't see X image next to the attachment. You might be getting confused about X image showing on the note record. There are 2 different X options (1 for image and 1 for Note itself).

Note: After removing rights, try to logout and log in into CRM to see the changes.

Also, request you to mark answers as verified which solved your problems.

Thanks & Regards,

Yadnyesh Kuvalekar

(Tick verify answer if this resolves your query).

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Please find attached the user role permission on the "notes" entity as well.

Was this reply helpful? Yes No
Verified answer

Yadnyesh Kuvalekar 4,102 on at

Like (0)

Report

Have you tried login with the user to which you have assigned this role?

If you are seeing this X icon it means, user is getting update privilege on Note entity by some way.

Can you please go to user record and click on manage role and see what all security roles assigned to the user?

Also, please check in what all teams the user is present as a team member.

I would recommend you to try below steps (just for testing purpose):

1. Go to settings > security roles > Open Vice President of Sales security role.

2. Click on save as and provide temporary name.

3. In new role, remove write (update) privilege on Note entity.

4. Go to settings > users > assign temporary role to the user you are testing with (remove all other roles).

5. Also, remove team members from other teams.

6. Log out and log in again and check if you still facing issue.

Was this reply helpful? Yes No
Community Member on at

Like (1)

Report

Hello,

I found that user I was testing with belonged to the team that had the "update" permission on the Notes. I removed both "update" and "delete" permission from this team and it fixed the problem. Working as a charm!

Thanks!

Was this reply helpful? Yes No