How to prevent regular user from editing web resource Dynamics 365

(0) Share

Report

Posted on by Mihai Co

I have a security issue. Regular user can edit html web resource and by doing this can run malicious code. D365 warns the user but before that is running the portion of code. What can I do to prevent this?

And the result:

I have the same question (0)

All responses (3)

Answers (0)

Suggested answer

Abdul Wahab 12,119 Moderator on at

Like (0)

Report

RE: How to prevent regular user from editing web resource Dynamics 365

Hi .Mihai Co,

You can find these privileges in the customizations tab of security roles. Allow greens and prevent reds these are my thoughts

Was this reply helpful? Yes No
Mihai Co 25 on at

Like (0)

Report

RE: How to prevent regular user from editing web resource Dynamics 365

This is by default. User has no right to edit web resources, only read. But still, before the error message occurs, the code is running.

Was this reply helpful? Yes No
Suggested answer

CRMJetty 3,512 on at

Like (0)

Report

RE: How to prevent regular user from editing web resource Dynamics 365

Hello Mihai,

- You can do it by modifying the security role for that user.
- Open the security role(which is assigned to the user) > Customization > Webresource
- Remove the access of create/read/write so that user will npt be able to update the webresource.

Was this reply helpful? Yes No