Security issue - view access for vendor bank account details

(0) Share

Report

Posted on by Community Member Microsoft Employee

Hi Guys,

I have an issue with security role which provides full access to users for vendor bank account details(VendBankAccounts form) although I set only read/view access on privilege.

Requesting you all to share your suggestions to help me in this.

Thanks in advance,

Tirupathi Rao

*This post is locked for comments

All responses (4)

Answers (0)

Suggested answer

Jay Barot 1,502 on at

Like (0)

Report

RE: Security issue - view access for vendor bank account details

Kindly check the override permissions for table object VENDBANKACCOUNT for below roles:

1) Treasurer (AOT Name: PaymTreasurer)

2) Accounting manager (AOT Name: LedgerAccountingManager)

3) Accounts payable manager (AOT Name: VendInvoiceAccountsPayableManager)

update the permission as view and create 2 new custom roles, one for full control and one with view.

Thanks

Jay Barot
André Arnaud de Cal... 291,431 Super User 2024 Season 2 on at

Like (1)

Report

RE: Security issue - view access for vendor bank account details

Hi Tirupathi,

From the security roles form you can select the role where this privilege is used and the click override permissions. Check whether the VendBankAccount table has wrong rights. You can override it here.

It might be caused by another privilege where also the same table is used on a certain form.

If the role shows the correct permission, the system user role might have granted too many rights on this table. Also this can be checked with the override permissions form.
Community Member Microsoft Employee on at

Like (0)

Report

RE: Security issue - view access for vendor bank account details

Thanks Sohaib for the reply.

sorry for missing issue complete description.

There are two standard privileges which are part of the several standard roles.

without modification,the standard privilege VendBankAccountsView gives user full access(create,edit,delete) to the form where it should provide view access.

without modification VendBankAccountsMaintain is working fine and it is included in all the major AP related standard roles but we need access for few users.

So we disabled above two privileges,duplicated and customized.

Custom_VendBankAccountsMaintain - assigned the users who needs full access, working fine.

Custom_VendBankAccountsView - the users are getting full access although we give access level view/read

where we want view access only.

Thanks,

Tirupathi Rao
Sohaib Cheema 46,610 User Group Leader on at

Like (0)

Report

RE: Security issue - view access for vendor bank account details

1) what is name of privilege, is that a standard privilege or customized?

2) how many roles are assigned to this user??

3) is any of those assigned roles customized at any level?