I have a Dynamics CRM 2011 application with 11 custom entities.
All users have varying levels of access to those 11 entities via custom security roles.
I need to make “some kind of adjustment”, so that regardless of the level of access a user has been granted to an entity, users are only allowed to use the import wizard on Entity X and cannot import data via the wizard and a CSV file to any other entity.
Initially, I thought this could be handled via security roles, but because I need to restrict people who have write and read access from importing to all entities except Entity, it appears that security roles operate in an “all or nothing type way” based on the level of access a user is granted an entity.
Using the import function must be restricted to only entity X, regardless of the level of access users have been granted to everything else.
How might I implement such a solution?
Do I need to write a plugin that stops the import process based on security role?
Is there a way to achieve this using a special combination of security roles that I have not figured out yet?
Basically, I want any user who has as one of their security roles “Import-Data-To-Entity-X”, to only have the rights to import data via the wizard to Entity X.
They should not be able to import to any other entity other than Entity X even if they have “create” access via a custom security role.
Any advice, recommendations, or suggestions would be greatly appreciated.
