Field level security for ProjTable

(0) Share

Report

Posted on by Community Member

I'm going over this document:

https://msdn.microsoft.com/en-us/library/hh272122.aspx

To figure out how to set up field level security on a new custom field on the projTable table. I can create a privilege that can be used to assign to a duty / role to make it editable. The problem is I want to make sure I'm understanding this correctly... I would need to find every other privilege that has prodTable in it and set the field to read only to make this work? I ask because there are a lot. and I"m assuming setting this at the table level is the most secure method.

Thanks

*This post is locked for comments

I have the same question (0)

All responses (3)

Answers (2)

Sort by

Verified answer

André Arnaud de Cal... 304,293 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi Dougq,

Your understanding is correct. However it would also be possible to overwrite the table/field permissions on security role level. This level has priority above the privilege table/field permissions. It would be less work.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

Thanks Andre,

So if right click on the table, go to Add-Ins -> Security tools -> View related security roles option. I filter this table down to roles that have Full access, edit, and create permissions. Is this the best way to get a list of high level roles for this?

How do I effectively override it just to change the field access? If I add the table into a role as EffectiveAccess Read will that make it so the role can only read the entire table despite if I only add the one field to that table permission?

Was this reply helpful? Yes No
Verified answer

Chaitanya Golla 17,225 on at

Like (0)

Report
Copy link

Link copied!

Hi,

That's true. To check the security objects use the Security tools options on table/prodTable and on menuitem/display/prodtable.

More information is available at the link: msdn.microsoft.com/.../hh745340.aspx

So, get the list of related roles(through above approach) and to get the intended field access please follow below steps

--On the intended role, under the tables node(Path: \Security\Roles\<Role-Name>\Permissions\Tables) add the Prod table with effective access as "Read"

-- Add required field to the ProdTable with effective access(property) as either Read/NoAccess

\Security\Roles\<Role-Name>\Permissions\Tables\ProdTable\RequiredField.

As the security role level takes precedence over table/field permissions(as Andre suggested), its better to assign at this level.

Hope this helps you.

Thanks,

Chaitanya Golla

Was this reply helpful? Yes No