Posts

Showing posts with the label Security

New tool! Privilege Discovery

I already blogged about that tool in the previous post so you can find all information about the tool here . Just notice that Donna won the contest to find the name of this tool. Congrats, Donna! The tool with the XrmToolBox can be found on CodePlex

Some new contents for the XrmToolBox

Image
I received some improvement requests from some users of my XrmToolBox and, as you know, it is so easy to develop tools for the XrmToolBox that I did what was asked, which is: Converting the CRM 4.0 tool Access Checker for CRM 2011 : So, this is a new tool. It allows you to check what access have a specific user for a specific record. You can define an entity, search for a specific record and a specific user and see what access rights are available. Working with user views in View Layout Replicator : Yes, you can now propagate a user view layout to a system view and vice versa. Of course, you need read and write access to these user views since CRM security can’t be bypassed regarding userview. If the user view has not been shared with you with read and write access, the tool won’t work. As usual, you can find everything on CodePlex

Create a truly personal field with Field Level Security

Since Microsoft Dynamics CRM 2011 was released, I never had the chance to really use Field Level Security feature. Last week, I was asked to implement a secured field that should be accessed only by the owner of the record, even if the record itself can be accessed by anyone.   This can be achieved with one field level security profile and one plugin .   Field Level Security Profile The field level security profile basically restrict Read and Update of the field to all users (or all teams) but allows Create. This way, anyone can create a record with access to the secure field. When created, as all users can’t read or update, the field is not accessible anymore.   Plugin The plugin will handle this problem. On PostCreate event, it will share the secured field with the owner. For this, we use the entity PrincipalObjectAttributeAccess to give Read and Update access to the secured field to the owner of the record. public void ShareSecureFieldWithOwner(Ent...