CRM 2013 Acces denied To Execute Plugin

(0) Share

Report

Posted on by Nirvana115

4,921

Hi all member,

I created a plugin in CRM 2013.
But only the Administrator can execute this plugin.
If other users execute the plugin i have Error message : Acces Denied.

<Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 26b87e83-bda0-e411-9fd9-001a4b4efa71, OwnerId: 0257ea20-d76f-e411-841b-001a4b4efa71, OwnerIdType: 8 and CallingUser: 6563d630-6b87-e411-8969-001a4b4efa71. ObjectTypeCode: 10017, objectBusinessUnitId: d6dc5d15-cf9c-e411-a83c-001a4b4efa71, AccessRights: WriteAccess </Message>

If someone knows how to give permission for the user in secutrity roles to execute the plugin.

Regards,

*This post is locked for comments

I have the same question (0)

All responses (11)

Answers (1)

Saroj Das 3,355 on at

Like (0)

Report

RE: CRM 2013 Acces denied To Execute Plugin

hi Nirvana, please check whether you have Append and Append To Previlege. In screen shot you can check

also you can enable trace and find the

1- Start -> run -> regedit.exe
2- HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > MSCRM
3- Add new keys
TraceEnabled
TraceRefresh
DWORD, value = 1

then get the privilege Id from the trace file check the detail in privilege entity in db. get the tracelogviewer tool from below link which would help you.

http://www.stunnware.com/crm2/topic.aspx?id=tracelogviewer

Thanks.

Was this reply helpful? Yes No
Suggested answer

Community Member on at

Like (0)

Report

RE: CRM 2013 Acces denied To Execute Plugin

Check if the plugin reference som entities that the users isnt aloud to interact with. There isnt a specific permission in securityroles which gives users permission to run plugins.

Was this reply helpful? Yes No
MarkR_B 465 on at

Like (0)

Report

RE: CRM 2013 Acces denied To Execute Plugin

Hi Nirvana

What "message"/Action (Create, Update, etc.) is the plugin registered against?

Does the user have permission to perform this action on the entity? If not you will need to give the user the write privilege to this entity.

Mark

Was this reply helpful? Yes No
Suggested answer

Mithilesh Kumar 10,047 on at

Like (0)

Report

RE: CRM 2013 Acces denied To Execute Plugin

Hi Nirvana,

Please check this on your Security Role

Hope that helps

Thanks

Was this reply helpful? Yes No
Nirvana115 4,921 on at

Like (0)

Report

RE: CRM 2013 Acces denied To Execute Plugin

Hi MarkR_B

The message is Create.

And the user have acces to Write in the custom Entity.

Regards,

Was this reply helpful? Yes No
Nirvana115 4,921 on at

Like (0)

Report

RE: CRM 2013 Acces denied To Execute Plugin

Hi Kumar,

I give all this role to user, but i have the same Error.

Regards,

Was this reply helpful? Yes No
Nirvana115 4,921 on at

Like (0)

Report

RE: CRM 2013 Acces denied To Execute Plugin

Hi Das,

I give this role to user and i have the same probleme,

i am going to try the trace.

Regards,

Was this reply helpful? Yes No
Suggested answer

PS 23,577 on at

Like (0)

Report

RE: CRM 2013 Acces denied To Execute Plugin

Hi

Go to settings>>Admin/Security>>Secuirty Roles>>select desired role (facing error)>>Customization tab on security role>>give read/write permissions on all plugin & sdk roles

But this should not happen, if you have registered the plugin by selecting execute as admin user (to be specified)

Was this reply helpful? Yes No
Verified answer

Aileen Gusni 44,524 on at

Like (2)

Report

RE: CRM 2013 Acces denied To Execute Plugin

Nirvana,

What is your entity objecttypecode = 10017? Get from entityview table if you are using onpremise

And you have no permission to that entity with record id = 26b87e83-bda0-e411-9fd9-001a4b4efa71, give the entity permission Write Access.

Check this calling user (if onpremise)

select * from systemuser where systemuserid = '6563d630-6b87-e411-8969-001a4b4efa71'

And replace with this owner id

0257ea20-d76f-e411-841b-001a4b4efa71

check can the user with ID '6563d630-6b87-e411-8969-001a4b4efa71'

can write to the record ID '26b87e83-bda0-e411-9fd9-001a4b4efa71' owner by '0257ea20-d76f-e411-841b-001a4b4efa71' in Business Unit 'd6dc5d15-cf9c-e411-a83c-001a4b4efa71'

That is how to read the message and translate it, I hope this can help.

But if it that doesnt help, try to register your plugin run as context as administrator or any user with any role.. This is so-called Impersonation plugin, change the Run in User Context to the authorized user.

salimadamoncrm.com/.../how-to-change-plugin-run-in-users-context-programmatically

msdn.microsoft.com/.../gg309416.aspx

The pro is you can have all users execute the plugin.

Cons = the modified on or created by record will be the System Admin

Hope this helps!

Thanks.

Was this reply helpful? Yes No
Nirvana115 4,921 on at

Like (1)

Report

RE: CRM 2013 Acces denied To Execute Plugin

Thanks Aillen for your reply.

When i check the objecttypecode = 10017 in EntityView, I found the correct custom entity, and i give the permission to user to write in this Entity, and the plugin work fine.

Regards,

Was this reply helpful? Yes No