Dynamics Community Forum Thread Details

prfRead Error for Custom Table

I'm hoping someone can help me out with an error that I can't make sense of. Leading up to end of day Friday 9/15 our users were having no issues saving records to the /money movement/ table, which is custom. Monday rolls around and every user that is assigned the specific role in question is getting this error:

/Assignee does not hold the required read ..../

The selected prvReadkov_MoneyMovement does not

hold the required read privilege or access to be assigned

records of this type. For more information, contact your

system administrator.

Error code: 0x80040299

I've never seen this before and there were no changes made to any of our security roles. I restored a very recent backup of our production environment to a SBX environment and tried to recreate the error, and did this successfully without having to change anything from the backup. I then went in and checked the following:

User's default business unit = Chicago

The business unit where the user's role is assigned by way of the Team membership = Chicago

The account record's business unit appending to the money movement creation = Chicago

I couldn't find any business unit mismatches across the user/team/role assignment/record creation. So I went in and started granting the Role full access to the Money Movement table along with every single table associated with the Money Movement table by way of a lookup column. Each time I updated the role to full access to the associated table, I would save the roll then try to save the record, Same Error. Even after the user had full access to the main table and all associated tables, I still couldn't save the record.

The last thing I tried was to go into the role and change the /Member's privilege inheritance/ from /Default - Team privileges only/ to /Direct User (Basic) access level land Team privileges/, saved the role, then was able to successfully save a record!!!

I am at a loss for words. I can't make sense of why all the sudden this role broke, and why even after having full access to every table the user couldn't save a record. Keep in mind the user was inheriting the role by way of team membership.

Hi,

Based on the information you have provided, we have done extensive testing but were unable to reproduce your issue, here are some of our test notes to help you troubleshoot the issue.

We created a custom entity, custom security role (with all permissions to the entity), a team, two users (no security role assigned)
Test one, the team assigns custom security roles and the two users join the team and add, delete and modify the records of the entity.
Test two, modifying records that are not owned by a team member is also possible.

Based on the above tests, we assume that your team members only inherited the access rights from the team, please check whether your team type is "Access Team".

In addition, please check whether the fields in the record you modified have field security enabled or not.

I hope my answer is helpful to you! If you have any other questions, please feel free to contact me.

Best Regards,
Rudy Zhang

Quick Links