Hello All Experts,
what minimum permission to be given to user such that the values in the fields should be readable using JavaScript or code .
but my concern is these fields are placed on the user entity and it should not be visible to the particular user when he opens the form.
can anyone help me in achieving this functionality.
*This post is locked for comments
If the problem is that you don't want the user to be able to read from a field, but you still want your javascript to access the field, then you simply can't do it with field security.
You can play with the visibility, however, that only works for the forms.. your users will still be able to use CRM report wizard (or Advanced Find) to get access to that field.
It's probably related to the other question you asked (impersonation in javascripts), but, long story short, you probably need to change the logic of those javascripts. If a user is not supposed to access the field, the same should apply to the javascript running under that user account.
My Bad, you won't be able to do it using Business rules as you cannot get the logged in person. You can write JS to check the role and show the fields.
Hello Alex,
Other users need to be added ........
according to this sentence if i select only read for other user then will he be able to read those field values on user entity form as well! if so then it is not as expected.
The other user should never see the data in these fields.
I may be missing something.. if you have a field, and a field security is enabled on the field, then:
- System admins will see it either way (you don't need to add system admins to any profile. CRM does it for you)
- Other users need to be added to a field security profile that will give them access to the field (can be read/create/update.. or any combination of those)
- Javascripts running on the forms will be running in the context of the user opening the form, so they will have exactly the same access to the fields as the user
Hello Vikas,
I am newbie in business rule.
can you give any sample example for creating the same?
You can create business rule to show it for only admin and hide for others.
Hello Vikas,
if i hide the fields then how system administrator will fill data into that.
Hello Alex,
I have checked with the Advanced find for the other user but the data in these fields are not visible although data is there in the database.
You can just place the field on form and hide it. You will be able to access the fields using JS and those will not be visible to users.
If you are asking how to set up field level security in such a way that a user opening the record can't see the fields, but a script running on the form can still read/update the fields, then there is no simple way to do it (I'm guessing you might come up with something, but it would be outside of the regular "javascript webresource" approach)
Although, you might impersonate plugins and workflows, and you might use those workflows (and, indirectly, plugins) from the javascript
EDIT: Just noticed your other post. Javascript is running in the context of the user. If a user can read, javascript can read.
There is one created field security profile and two custom fields have been added to that profile.
After that one User having System Administrator been added with permission of read, update etc all the three when we select individual field from field security profile.
for this user the values are visible on the user entity form but for others it is not visible in normal text only **** are there.
suppose if other user also put in the field security profile and give only read permission will the code and javascript work as currently code is not reading the data from these fields for this particular entity record although record is there.
#1
André Arnaud de Cal...
291,622
Super User 2024 Season 2
#2
Martin Dráb
230,354
Most Valuable Professional
#3
nmaenpaa
101,156
Share
Report
All responses (
Answers (
