I've created a custom AIF service that will post Inventory Transfer Journals from a 3rd party application/service. I checked "Allow trusted intermediary to impersonate" so the service can pass "LogonAsUser=Domain\TestUser" and then the journal will actually get posted by the correct user.
The user account "Domain\TestUser" can create/post transfer journals in AX normally with their current security.
I created a privilege and added the service operation as an entry point, but when I try and call the service as the user, AX is asking for random security to all of the tables it touches.
It doesn't seem right that I have to continually add each table that it touches for security?? Shouldn't the entry point alone be sufficient? The user already can post journals manually.
First message was:
message=Cannot select a record in Relationship between the inventory journal line and the inventory transactions originator (InventTransOriginJournalTrans).
Access Denied: You do not have sufficient authorization to modify data in database.
I added the table to the security privilege and then the next message:
message=Cannot create a record in On-hand inventory changes (InventSumDelta).
Access Denied: You do not have sufficient authorization to modify data in database.