Small and medium business | Business Central, N...

How to disabling "Posting" permission from user Permission Sets

(0) Share

Report

Posted on by Kelvin Hew

195

I am customizing a set of permission for Accounts Payable users where this group of user only allow to create Purchase Invoice but not allow for posting. One of the method I discovered is to remove the "Read" permission in Table 17 - G/L Entry and Table 45 - G/L Register. But this will be not helpful,as the users won't be able to run "Preview Posting" for checking as this will require "Read" permission on these 2 table.

Is there any way to remove the "Post" and "Post & Print" function in the permission set?

I have the same question (0)

All responses (9)

Answers (0)

Suggested answer

Renato Fajdiga 1,853 on at

Like (0)

Report

Hi,

one of the options would be that in the permission set for Account Payable group of user include all Codeunit objects and grant execution permission to yes, but remove execution permission to Codeunits 90,91,92.

Best regards,

Renato

Was this reply helpful? Yes No
Kelvin Hew 195 on at

Like (0)

Report

Hi Renato,

Thanks for the input.

I tried to follow your method by getting rid of Codeunits 90,91,92 in the permission set, but during the testing, I still able to do posting in Purchase Invoice/Purchase Journal screen by using the revised permission set. Checking to the "Effective Permission" on the user ID that i'm using, I realised the 3 codeunits is still visible. I'm sure I have removed the 3 codeunits in the permission set, but not sure why it still shows when check in "Effective Permission". Refer to my screenshot below:-

Screenshot 1 - Codeunits 90,91,92 has been removed under "ADS AP EDIT" permission set.

Screenshot 2 - The 3 Codeunits still visible under "Effective Permission" screen for "ADS AP EDIT".

Was this reply helpful? Yes No
Suggested answer

Renato Fajdiga 1,853 on at

Like (1)

Report

Hi,

do you have on user maybe additional permission sets instead of ADS AP EDIT? Do you have maybe in this ADS AP EDIT entry which says Codeunit 0 and permission Execute because this will override and grant access to all codeunits?

Best regards,

Renato

Was this reply helpful? Yes No
Kelvin Hew 195 on at

Like (0)

Report

Hi Renato,

By removing the "Codeunit 0" does do the trick, it does stopping user form doing posting in Purchase Invoice screen, however user still not able to select "Preview Posting" button, just like previously I removing the Table 17 and 45. I guess there is no way to allow user to get to "Preview Posting" screen without enabling these Codeunits and table that we are discussing.

Was this reply helpful? Yes No
Teri Callahan 10 on at

Like (0)

Report

Hi Kevin, Did you find a solution to your remaining issue?

By removing the "Codeunit 0" does do the trick, it does stopping user form doing posting in Purchase Invoice screen, however user still not able to select "Preview Posting" button, just like previously I removing the Table 17 and 45. I guess there is no way to allow user to get to "Preview Posting" screen without enabling these Codeunits and table that we are discussing.

Was this reply helpful? Yes No
Kelvin Hew 195 on at

Like (1)

Report

Hi Teri,

Nope, still the same.

Was this reply helpful? Yes No
Teri Callahan 10 on at

Like (0)

Report

Thanks Kelvin. (Sorry for the earlier misspelling of your first name.)

Was this reply helpful? Yes No
Suggested answer

ew98000 229 on at

Like (0)

Report

Another idea might be to remove (hide) the post and post/print options from that menu by personalizing (customizing the profile).

Was this reply helpful? Yes No
Jwoods 12 on at

Like (0)

Report

I like the hiding, I didn't realize you could do it to that level.

Thanks

Was this reply helpful? Yes No