Unified Operations & Dynamics AX Forum

Hi developers. Any idea, why would 'find' method of the class work for one role, and not for the other? i cant see any permissions on the table, nor the code permissions for the method. 
it looks like this:

    projInvoiceTable = ProjInvoiceTable::find(projTableLocal.ProjInvoiceProjId);
    projSalesCurrencyCodeLocal = projInvoiceTable.CurrencyId;

so for one user/role, it finds the projInvoiceTable, and gets the right CurrencyId, and for others it doesnt, and the ProjInvoiceProjId is there all the times.
where should i look for security which would prevent it, or how do i override the security?
Thanks,
Pedja

Hi developers. Any idea, why would 'find' method of the class work for one role, and not for the other? i cant see any permissions on the table, nor the code permissions for the method. 
it looks like this:

    projInvoiceTable = ProjInvoiceTable::find(projTableLocal.ProjInvoiceProjId);
    projSalesCurrencyCodeLocal = projInvoiceTable.CurrencyId;

so for one user/role, it finds the projInvoiceTable, and gets the right CurrencyId, and for others it doesnt, and the ProjInvoiceProjId is there all the times.
where should i look for security which would prevent it, or how do i override the security?
Thanks,
Pedja

Hi developers. Any idea, why would 'find' method of the class work for one role, and not for the other? i cant see any permissions on the table, nor the code permissions for the method. 
it looks like this:

    projInvoiceTable = ProjInvoiceTable::find(projTableLocal.ProjInvoiceProjId);
    projSalesCurrencyCodeLocal = projInvoiceTable.CurrencyId;

so for one user/role, it finds the projInvoiceTable, and gets the right CurrencyId, and for others it doesnt, and the ProjInvoiceProjId is there all the times.
where should i look for security which would prevent it, or how do i override the security?
Thanks,
Pedja

Predrag,

You didn't mention if this was for AX 2012 or D365FO so I will give both scenarios.

Also you don't specify if this is happening for one role assigned to multiple users or between multiple roles assigned to multiple users. If its happening with one role assigned to multiple users then I would lean towards this being a XDS issue. If its between multiple roles between multiple users then it might be a security issue which I will discuss below.

For AX 2012, because there is no real connection between entry point security and data source security you can go directly to the table level access in this case the ProjInvoiceTable to look for a difference in access between the roles that work and the roles that don't work.

For D365FO, there is now a direct connection between a menu items access and the access that a user has to the data sources that are tied to it via the form. So you would need to go to the menu item level to look for difference in access. At Fastpath, we have developed a report to show the associations between menu item -> form -> data source which is how I was able to generate this below. But as you can see any of those menu items could give the user access to the ProjInvoiceTable.


In D365FO, you also have to worry about explicit denies at the table level although they aren't as commonly used.

Hi developers. Any idea, why would 'find' method of the class work for one role, and not for the other? i cant see any permissions on the table, nor the code permissions for the method. 
it looks like this:

    projInvoiceTable = ProjInvoiceTable::find(projTableLocal.ProjInvoiceProjId);
    projSalesCurrencyCodeLocal = projInvoiceTable.CurrencyId;

so for one user/role, it finds the projInvoiceTable, and gets the right CurrencyId, and for others it doesnt, and the ProjInvoiceProjId is there all the times.
where should i look for security which would prevent it, or how do i override the security?
Thanks,
Pedja

Predrag,

You didn't mention if this was for AX 2012 or D365FO so I will give both scenarios.

Also you don't specify if this is happening for one role assigned to multiple users or between multiple roles assigned to multiple users. If its happening with one role assigned to multiple users then I would lean towards this being a XDS issue. If its between multiple roles between multiple users then it might be a security issue which I will discuss below.

For AX 2012, because there is no real connection between entry point security and data source security you can go directly to the table level access in this case the ProjInvoiceTable to look for a difference in access between the roles that work and the roles that don't work.

For D365FO, there is now a direct connection between a menu items access and the access that a user has to the data sources that are tied to it via the form. So you would need to go to the menu item level to look for difference in access. At Fastpath, we have developed a report to show the associations between menu item -> form -> data source which is how I was able to generate this below. But as you can see any of those menu items could give the user access to the ProjInvoiceTable.


In D365FO, you also have to worry about explicit denies at the table level although they aren't as commonly used.

Hi developers. Any idea, why would 'find' method of the class work for one role, and not for the other? i cant see any permissions on the table, nor the code permissions for the method. 
it looks like this:

    projInvoiceTable = ProjInvoiceTable::find(projTableLocal.ProjInvoiceProjId);
    projSalesCurrencyCodeLocal = projInvoiceTable.CurrencyId;

so for one user/role, it finds the projInvoiceTable, and gets the right CurrencyId, and for others it doesnt, and the ProjInvoiceProjId is there all the times.
where should i look for security which would prevent it, or how do i override the security?
Thanks,
Pedja

Hi developers. Any idea, why would 'find' method of the class work for one role, and not for the other? i cant see any permissions on the table, nor the code permissions for the method. 
it looks like this:

    projInvoiceTable = ProjInvoiceTable::find(projTableLocal.ProjInvoiceProjId);
    projSalesCurrencyCodeLocal = projInvoiceTable.CurrencyId;

so for one user/role, it finds the projInvoiceTable, and gets the right CurrencyId, and for others it doesnt, and the ProjInvoiceProjId is there all the times.
where should i look for security which would prevent it, or how do i override the security?
Thanks,
Pedja

Hi developers. Any idea, why would 'find' method of the class work for one role, and not for the other? i cant see any permissions on the table, nor the code permissions for the method. 
it looks like this:

    projInvoiceTable = ProjInvoiceTable::find(projTableLocal.ProjInvoiceProjId);
    projSalesCurrencyCodeLocal = projInvoiceTable.CurrencyId;

so for one user/role, it finds the projInvoiceTable, and gets the right CurrencyId, and for others it doesnt, and the ProjInvoiceProjId is there all the times.
where should i look for security which would prevent it, or how do i override the security?
Thanks,
Pedja

Hi developers. Any idea, why would 'find' method of the class work for one role, and not for the other? i cant see any permissions on the table, nor the code permissions for the method. 
it looks like this:

    projInvoiceTable = ProjInvoiceTable::find(projTableLocal.ProjInvoiceProjId);
    projSalesCurrencyCodeLocal = projInvoiceTable.CurrencyId;

so for one user/role, it finds the projInvoiceTable, and gets the right CurrencyId, and for others it doesnt, and the ProjInvoiceProjId is there all the times.
where should i look for security which would prevent it, or how do i override the security?
Thanks,
Pedja