Dynamics Community Forum Thread Details

NAV2016 Permission Conflict

Hi,

I just took over application manager role and tasked to enhance the existing user roles & permissions.

One of the significant issues in NAV2016 is any user who granted with PR/PO creation and Vendor read is able to view the company trial balance. The way to get to the trial balance is at Vendor List -> click on the number of Balance (LCY) in Vendor Statistics factboxes -> select any record in Vendor Ledger Entries and choose Navigate -> click on the No of Entries for G/L Entry line -> General Ledger Entries will appear. Click on G/L Account No. to show pulldown list and choose Advanced -> at Select - G/L Account List window, credit & debit amounts already shown together with Trial Balance report button ready to choose to produce.

I did a test by removing the Read Permission from one permission set for PO/PR creation. It works for Vendor List which navigation stopped after Vendor Ledger Entries but any PO cannot be posted for quantity receive with error message "You do not have the following permission on Tabledata G/L Entry: Read".

I wonder whether anyone out there also facing this problem. Anyone help is much appreciated.

Many thanks in advance.

Hi TeohLH,

One of our customer wants their Purchase User not to view the General Ledger Entries (Page ID = 20) and Chart of Accounts (Page ID = 16). By using default permission set, We can't restrict the user. So we made this customization. Which prevents the user not to view G/L Entries.

Open Development Environment (You need the Developer License to do this), Page --> Page ID-20 - General Ledger Entries -->Click Design --> Click C\AL code icon or Press F9 ,

Paste the below code under the OnOpenPage() Trigger

OnOpenPage()

IF USERID = <Username> THEN

ERROR('You Do Not have the permission to view General Ledger Entries');

If you want the entire purchase team not to view the General Ledger Entries means,

Step 1: Create a new "User Group" called PURCHASE by navigating the path "CRONUS India Ltd./Departments/Administration/IT Administration/General/User Groups" .

Step 2: Click the Action "Add Group Members" on the ribbon, Now you can select the users of Purchase team.

Open the Development Environment (You need the Developer License to do this),

Step 3 : Open Page --> General Ledger Entries(ID = 20) -->Click Design --> Click C\AL code icon or Press F9 ,

Step 4: Press "Ctrl + G" to open Global variables page, You can see the list of variable, Create a new Global variable for User Group Member( Table ID = 9001).

Name : UserGroupMem

Data Type : Record

Sub Type : User Group Member

Step 5: Go to C\AL code and Paste the below code under the OnOpenPage() Trigger and compile

UserGroupMem.RESET;
UserGroupMem.SETRANGE("User Group Code",'PURCHASE');
UserGroupMem.SETRANGE("User Name",USERID);
IF UserGroupMem.FINDFIRST THEN
ERROR('You Do Not have the permission to view General Ledger Entries');

Quick Links