You’re offline. This is a read only version of the page.
Hi
I've got a really weird issue with security on the table smmActivities.
To investigate, I made 1 role with just 1 privilege with 1 READ access entry point.
Thus 1 role, 1 priv, 1 menu display item (read), 1 form (smmActivities).
The security tool shows me the role has view access on smmActivities.
The "security add-in" shows me that the role has view access on smmActivities.
However, when i test this (using a security test workspace OR a completely new user with only this role) i am able to edit and even delete records.
This seems absurd: is this functionality hardcoded in AX or something?
*This post is locked for comments
Not sure whether this is the issue you have ..........
To restrict access to a field group it is enough just to set its NeededPermission property, to Manual and then to provide your users with a special privilege on this form control.
However, when it comes to a grid, it is not enough: you also need to change the same property and the needed permission on all included fields or, also the display methods.
for background info msdn.microsoft.com/.../gg879980.aspx
No, it should not. Security is stronger, you can only get around it with the unchecked() keyword in code, or doing a runAs().
Long shot, but i'm seeing a lot of allowEdit() and allowCreate() code in the code of this form.
I hope the allowEdit does not override the permissions granted by the security framework?
Try flushing/priming the security role cache once you have stopped your AX AOS instance with the AXUtil as explained here:
[View:https://blogs.msdn.microsoft.com/axsupport/2014/05/08/ax-user-sessions-hanging-following-changes-to-security/:750:50]
Also drop the usage data for the form element in SysLastValue.
You do not have to use separate users, you could just add the role to your admin account and revoke admin access temporarily for a newly opened workspace:
Share
Report
All responses (
Answers (
static void WIK_RunAsUser(Args _args)
{
SecurityUtil::sysAdminMode(false);
//SecurityUtil::flushAll();
infolog.createWorkspaceWindow();
}
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
#1
André Arnaud de Cal...
291,113
Super User 2024 Season 2
#2
Martin Dráb
229,918
Most Valuable Professional
#3
nmaenpaa
101,156