Hi all,
Previously, I had success with using the Exclude and Include permissions in a permission set in Business Central, to exclude permissions for all companies, and using another (or several other) to include permissions for a specific company, using security filters.
I've created a permission set, where I include all permissions on table 2000000006 (Company), from the System application published by Microsoft.
This is included in a permission set, where I use it as a permission set relation, in this I exclude the permission from my permission set, to remove access to all companies.
In a new permission set, I grant the access to a specific company, by using security filter on table 2000000006. Now this is no longer possible as of version 25.1.25873.27434. It was possible in version 25.0.23364.24925.
I have attached some screenshots of the setup. Upon closing the page of the permission set, which grants permission to a specific company, I get this error:
One or more errors occurred while closing the page.
The value "Company: Id={595C72D7-1A7A-EF11-AC24-6045BDE98980}" can't be evaluated into type TableFilter. The value "{595C72D7-1A7A-EF11-AC24-6045BDE98980}" can't be evaluated into type Integer.
One or more errors occurred while closing the page.
The value "Company: Id={595C72D7-1A7A-EF11-AC24-6045BDE98980}" can't be evaluated into type TableFilter. The value "{595C72D7-1A7A-EF11-AC24-6045BDE98980}" can't be evaluated into type Integer.
This error only started, when it went from version 25.0 to 25.1. Now it isn't possible to create the Security Filter.
Mine persists as it was made in version 25.0, but doesn't work anymore.
The big gain from this, was that it was now possible to have a clean overview of permission sets.
I could have a permission set, to grant finance access for someone, but it would not grant them access to the company.
I could use another permission set to grant access to the company.
When they would use the company selector, they would only be able to see the companies I had assigned to them.
All this to make it easier to handle from the Security Groups in Business Central, to handle it in Microsoft Entra ID as minimalized Security Groups there.
I have tried to use a debugger to spot the difference in the code, but I cannot find the root of the issue...
I'm unsure whether it is a bug fix from Microsoft, and they intentionally removed this option, or whether it is a bug that they need to fix.
Thank you in advance 😊
All pictures and error codes are from my CDX environment.