Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Social Pane demands ex...
Microsoft Dynamics CRM (Archived)

Social Pane demands extended write access privilege

(0) ShareShare
ReportReport
Posted on by LukasB

Hello Dynamics-Community,

in our company we are following the approach that users can create but not edit Activities for other users.

At the first glance this is an "easy" requirement. Give the global users the global create permission and the user-only write access.

This works like a charm if we are using the standard forms, but NOT with the social pane quick creation process. The system throws here an error concerning the write access-privilege.

My question now is: Can someone reproduce this behavior? And - Which write-action could here be relevant?

Best Regards,

Lukas

*This post is locked for comments

  • LukasB Profile Picture
    LukasB on at
    RE: Social Pane demands extended write access privilege

    Hi Nitin,

    thanks for your fast answer :-)

    that is correct, the write privilege on ActivityPointer is missing.

    -> But, this is also the problem. If you grant the user higher write permissions for this case, they are also able to edit activities in general (for example: Closing other task, write or delete descriptions,... )

    The Problem here is that the social pane doesn't write the "Regarding" field within the creation-process, but afterwards where the records was already created.

    The "classic" quick-creation process or the standard activity creation process works with this approach (global creation but user limited editing) but the social pane quick creation has a bug here.

    Just to keep in mind, we have the use-case:

    - User A creates an activity for User B directly

  • VermaNitin Profile Picture
    VermaNitin 455 on at
    RE: Social Pane demands extended write access privilege

    Hi Lukas,

    Thanks for writing back!

    The error description shows that the user is missing the write privileges on ActivityPointer entity(ObjectTypeCode= 4200).

    So you can try giving the user level write privileges to the user.

    Please let me know if that solves the issue.

    Many thanks,

    Nitin Verma

  • LukasB Profile Picture
    LukasB on at
    RE: Social Pane demands extended write access privilege

    Hi Nitin,

    sorry for my very late answer. I hope you can help me.

    I did the following steps:

    - Open the Quick-Create form of the social pane ("Add Task")

    - fill in the title, description, etc.

    - fill in the new Owner for the task

    - Press OK

    Result: ---------------------------------------------------------

    - The error come up (see the description below)

    - BUT: The picked Owner gets the Task but NOT with a filled "regarding"

    Error description here: ---------------------------------------

    Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=8.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: e37bc35b-7c97-e711-8127-e0071b662011, OwnerId: 2db92efe-7dbc-e611-80f7-5065f38aea71,  OwnerIdType: 8 and CallingUser: 58edeae7-71aa-e611-80f9-5065f38a4a61. ObjectTypeCode: 4200, objectBusinessUnitId: 05a5fbad-dc20-e511-810d-c4346bad02e0, AccessRights: WriteAccess Detail:

    <OrganizationServiceFault xmlns:i="www.w3.org/.../XMLSchema-instance&quot; xmlns="schemas.microsoft.com/.../Contracts&quot;>

     <ActivityId>967413d2-5e6c-46fc-ad7b-173d7f79585c</ActivityId>

     <ErrorCode>-2147187962</ErrorCode>

     <ErrorDetails xmlns:d2p1="schemas.datacontract.org/.../System.Collections.Generic&quot; />

     <Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: e37bc35b-7c97-e711-8127-e0071b662011, OwnerId: 2db92efe-7dbc-e611-80f7-5065f38aea71,  OwnerIdType: 8 and CallingUser: 58edeae7-71aa-e611-80f9-5065f38a4a61. ObjectTypeCode: 4200, objectBusinessUnitId: 05a5fbad-dc20-e511-810d-c4346bad02e0, AccessRights: WriteAccess </Message>

    […]

    -> So my conclusion is that the social Pane creates the task record and writes the regarding lookup afterwards. This write action needs extended permissions.

    Many thanks to your help!

    Best Regards,

    Lukas

  • VermaNitin Profile Picture
    VermaNitin 455 on at
    RE: Social Pane demands extended write access privilege

    Hi Lukas,

    Can you please provide the error description?

    Many times the entity codes are included for which the privileges needs to be granted so you can give it a chance to figure out the issue.

    Hope it helps!

    Many thanks,

    Nitin Verma

  • LukasB Profile Picture
    LukasB on at
    RE: Social Pane demands extended write access privilege

    FYI - We havent registered any workflows or other plugIns.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Suggested Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,269 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,198 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans