D354 Read permission set allows apply of entries

(0) Share

Report

Posted on by Marmeduke8

Greetings Folks

I would be grateful for any assistance here please.

I have users who just need to just read data. Once I have assigned the role of D365 READ, those users can apply transactions in e.g. customers. I have made my own user defined role based off D365 READ and if I then remove the read access to GL Entry, they cannot apply the transaction. However, if I do that then they cannot read GL data and so that defeats the purpose.

I can't work out what I need to disallow in my user defined D365 READ role to allow them to read GL data but not have the ability to do apply and unpply transactions.

Any help would be appreciated please.

Thank you

All responses (6)

Answers (0)

Marmeduke8 on at

Like (1)

Report

RE: D354 Read permission set allows apply of entries

Greeting Guys

I thank you both for your time.

I had another perm set for this user and I could not apply when I just had that perm set active. I could also not apply when I just had D365 READ active. However, when I assigned both to the user, I could apply.

Based on the information provided by both of you, I was able to narrow my issue down the Table Data.Cust Ledg.Entry modify record and I set that to 'read' only. That was in my other perm set.

That has resovled my problem. I thank you both for your guidance.

Best regards
Suggested answer

Inge M. Bruvik 993 Super User 2024 Season 1 on at

Like (0)

Report

RE: D354 Read permission set allows apply of entries

I have also just tried to replicate the issue in a clean sandbox and i am not able to apply entries with only the D365 Read permissions.

So there has to be another permission assigned to this user. Have you checked the effective permissions from the user card?

This is the error i get with only the D365 Read assigned when i try to apply customer ledger entries.

So the error is just as expected with only the read permissions.
Suggested answer

MahGah 15,433 on at

Like (0)

Report

RE: D354 Read permission set allows apply of entries

Hi

Adding to Inge's comment I just want to point out in D365 Read user has Codeunit 0 which basically means all codeunits. Hence, you can remove that Coduint 0 and the try. The only downside is they may receive errors for other needed Codeunit that you need to add back one by one.
Suggested answer

Inge M. Bruvik 993 Super User 2024 Season 1 on at

Like (0)

Report

RE: D354 Read permission set allows apply of entries

My point was not that those two codeunits are a part of the D365 READ permission. But you should create a permission set that excludes the execute rights on those two codeunits.
Marmeduke8 on at

Like (0)

Report

RE: D354 Read permission set allows apply of entries

Greetings Inge

Thank you for your reply, but those 2 codeunits are not checked in the D365 READ permission set. So it can't be them.

Thank you
Suggested answer

Inge M. Bruvik 993 Super User 2024 Season 1 on at

Like (0)

Report

RE: D354 Read permission set allows apply of entries

If you try to deny then right to Codeunit 101 and Codeunit 111 they should not be able to apply entries.