Skip to main content

Notifications

Microsoft Dynamics CRM (Archived)

Field level security update privilege

Posted on by

have some questions on using Field level Security for some requirement..

  • When using FLS, can an attribute have update privilege but no read privilege for a particular user?What happens to such attribute when retrieved(via sdk and webapi)  and what would be the behavior on form? will it return null and ****?
  • If 2 or more security profiles give different access to particular field for same user, how is the final privileges calculated?
  • Can we secure an option set value attribute by specifying default value?
  • Any easy way to check(without querying attribute metadata) if the current user has access to update a particular field on form via javascript?

Please help?

*This post is locked for comments

  • ashlega Profile Picture
    ashlega 34,475 on at
    RE: Field level security update privilege

    Just found this - should answer #4

    getUserPrivilege

    Returns an object with three Boolean properties corresponding to privileges indicating if the user can create, read or update data values for an attribute.

    msdn.microsoft.com/.../gg334409.aspx

  • ashlega Profile Picture
    ashlega 34,475 on at
    RE: Field level security update privilege

    Hi,

     as for #1, just to clarify, you can use update without read:

    www.itaintboring.com/.../masked-fields-in-dynamics-365

     I'm pretty sure you will get null for such fields if you query them through Web API/SDK.

     As for the javascript.. Wondering what will happen if you use getValue on the control(at least on the text controls). Might just give you "***" 

     Everything else is as Henry suggested..

  • Suggested answer
    Henry J. Profile Picture
    Henry J. 5,237 on at
    RE: Field level security update privilege

    1. I believe that if you only have the update privilege you will not be able to see values in values. You need Read.

    2. The most permissive rights are applied

    3. What do you mean default value for an option set ? People will not be able to set data in it if they don't have the create / write privilege

    4. I don't think such an easy method exist. You could do a JavaScript calling an action to check privileges.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Community AMA December 12th

Join us as we continue to demystify the Dynamics 365 Contact Center

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,240 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,149 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans