Hello!
Two users have the same security role applied to both of them. This role has only basic access level privileges for all actions on opportunity records. Security for one user behaves exactly as expected, he can read/write/etc only records created by him, but security for another one does not apply at all: he can view and edit all of the opportunity records, regardless of the ownership. No other security roles are applied to any of them. Both of these users are in the same business unit and same team.
Because I've spent so much time trying to fix it here is in point form everything that I've tried to no avail:
- Changing the business unit does not help, the user can read/write records owned by any business unit
- Changing the team does not change anything either
- I am absolutely positive that there is only one security role applied, so no cumulative privileges issues here
- The records are not shared. Or at least, when I open the sharing form, no usernames show up
- Both users have same license mode (professional) and same and access mode (read-write)
- Hierarchy security is disabled
- Tuning it on and off type solutions do not help, in particular:
- Disabling the security role and applying it back
- Copying the security role and applying the new one
- Disabling the user and enabling him back
- Restarting the server
- Removing all of the opportunity entity privileges completely actually does disable both of them from opening opportunity records altogether. But giving back even basic privileges re-enable the god-mode user to do whatever he wants with the opportunities.
Being able to poke around the system is probably needed to troubleshoot this kind of problem with an unknown cause. So any hint as to in which direction I should be looking would be very much appreciated. Some setting, an article on ThechNet/MSDN, a keyword to Google Bing, anything!
I suspect it might have something to do with the SQL database permission, but my experience in with Microsoft SQL is very limited.
We are using Microsoft Dynamics CRM 2016 on-premise.
*This post is locked for comments
I have the same question (0)
