You’re offline. This is a read only version of the page.
1,160
Hi Experts,
I'm working on dynamics portal for one of my clients and they want to allow anonymous customers to use the portal. For showing the relevant data to anonymous customers I have to enable global access on some of the entities. But the client is not happy with it because they concerned about somebody using the URL to get data by manipulating the ids as CRM uses sequential GUIDs.
So my question, is there any way to show the data to anonymous customers without giving global access to entities?
Thanks
Anil
Agree with Wayne. If they have access to record then even if it is visible to them using GUID, its not a security concern. This scenario hold true for authenticated users as well i.e. if I have access to 10 cases then I can manipulate the URL to load the contact by id. Even in CRM, you can load record just by changing URL. You need to educate/convince your user that this is not a security concerns as they already have access to your data.
To answer your questions, No, there is no way to display data to anonymous customer without giving global permissions.
Hope this helps.
Better move to on-premise world, have it hosted on your servers & enable only to intranet users.
Edit: I read it again, it seems you have external customer facing portal (or partners?). My bad. Weird situation, unnecessary workround functionality will create more work. Convince the client.
Hi Wayne,
Thanks for your reply.
I had same kind of thoughts but that will introduce lot of complications. Its not just one entity and the list will grow eventually.
The requirement kinda sounds like "We want it anonymous, but not". Maybe build a custom entity with the data that needs to be shown anonymously and only give global read to that entity?
Share
Report
All responses (
Answers (
