Hi
I got a problem a user which only has read access on a record of a custom entity can add another user to the access team on a record of said entity. With the access team the other users get read/write/append/append to privileges. The user only has the basic privileges you need to log into dynamics and red access on team, user and the custom entity project.
So why can he add other users to an access team which has more privileges than he himself? and he can't edit anything on the record except the access team.
regards
Manuel
*This post is locked for comments