XDS Security on InventSum

(0) Share

Report

Posted on by Javirrubio

965

Hi,

I have a requirement to create security roles for some users where they should only be able to "see" certain warehouses.

I've managed to use XDS and all is working fine. However, when working with Transfer Orders they can only see the transfer orders shipped from their warehouses but not the ones arriving.

My question is, what is the best approach to find a solution for this? Can we overcome XDS security on this particular form? Has someone any experience on this?

*This post is locked for comments

I have the same question (0)

All responses (8)

Answers (2)

Verified answer

Vilmos Kintera 46,149 on at

Like (1)

Report
Copy link

Link copied!

You could disable XDS from code on-demand with XDSServices class, give it a try:

daxtarkowski.wordpress.com/.../disabling-xds-security-on-demand

Was this reply helpful? Yes No
Suggested answer

André Arnaud de Cal... 303,730 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi Javier,

You can also try to create a temporary table with an xds() method which returns a list with "my" transfer orders. Then you can apply x++ logic to define which transfer orders would be visible. Note that it might cause performance problems with large number of transfer orders that needs to be visible. If you filter on e.g. active and only certain warehouses, it might be OK, but you have to test it. An example is the table MyRoles. In the security policy you can then use this table as basic input for transfer orders. Possibly you have to create a separate security policy for the transfer orders.

Was this reply helpful? Yes No
Javirrubio 965 on at

Like (0)

Report
Copy link

Link copied!

Thank you Vilmos.

I've added the code into the Init method in the InventTransferOrder form but I still can't see the lines when the FROM warehouse is not in my XDS policy

Was this reply helpful? Yes No
Verified answer

Mea_ 60,286 on at

Like (0)

Report
Copy link

Link copied!

Hi Javier Rubio,

Where exactly did you put your code ? You may consider disabling it in executeQuery() of datasource before super() and enabling after.

Was this reply helpful? Yes No
Suggested answer

Mahmoud Hakim 17,887 on at

Like (0)

Report
Copy link

Link copied!

try to apply record level security on transfer order table (from warehouse/to warehouse/status) fields

Was this reply helpful? Yes No
Javirrubio 965 on at

Like (0)

Report
Copy link

Link copied!

Late reply, sorry. This exactly sorted my problem. Thank you very much

Was this reply helpful? Yes No
DMaria 285 on at

Like (0)

Report
Copy link

Link copied!

Hi,

Can you give an example using extensions?

Was this reply helpful? Yes No
André Arnaud de Cal... 303,730 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

I just released a related blog post around this topic: kaya-consulting.com/extensible-data-security-examples-secure-by-warehouse

@DMaria, Can you possible create a new question on the Dynamics 365 for Finance and Operations forum with some more background information on your question? This post was related to AX2012.

Was this reply helpful? Yes No