Global entity permission

(0) Share

Report

Posted on by anilambadan

1,160

Hi Experts,

I'm working on dynamics portal for one of my clients and they want to allow anonymous customers to use the portal. For showing the relevant data to anonymous customers I have to enable global access on some of the entities. But the client is not happy with it because they concerned about somebody using the URL to get data by manipulating the ids as CRM uses sequential GUIDs.

So my question, is there any way to show the data to anonymous customers without giving global access to entities?

Thanks

Anil

Categories:

Portals

I have the same question (0)

All responses (4)

Answers (0)

Wayne Walton 13,730 on at

Like (1)

Report

The requirement kinda sounds like "We want it anonymous, but not". Maybe build a custom entity with the data that needs to be shown anonymously and only give global read to that entity?

Was this reply helpful? Yes No
anilambadan 1,160 on at

Like (0)

Report

Hi Wayne,

Thanks for your reply.

I had same kind of thoughts but that will introduce lot of complications. Its not just one entity and the list will grow eventually.

Was this reply helpful? Yes No
Suggested answer

Arun Vinoth 11,615 Moderator on at

Like (0)

Report

Better move to on-premise world, have it hosted on your servers & enable only to intranet users.

Edit: I read it again, it seems you have external customer facing portal (or partners?). My bad. Weird situation, unnecessary workround functionality will create more work. Convince the client.

Was this reply helpful? Yes No
Suggested answer

RaviKashyap 55,410 Moderator on at

Like (0)

Report

Agree with Wayne. If they have access to record then even if it is visible to them using GUID, its not a security concern. This scenario hold true for authenticated users as well i.e. if I have access to 10 cases then I can manipulate the URL to load the contact by id. Even in CRM, you can load record just by changing URL. You need to educate/convince your user that this is not a security concerns as they already have access to your data.

To answer your questions, No, there is no way to display data to anonymous customer without giving global permissions.

Hope this helps.

Was this reply helpful? Yes No