SQL permission problem.

Lion

Hello

I have Navision 4.0 sp2 on the SQL 2000. I want to dany permission to the modify field Credit limit (LCY) on the Customer card. I setup user perrmision on the Enterprise manager on SQL but in Navision I still can modify that field. When I setup this permission on the Public role every usres can't modify that field. Haw can I set this permission to the some users not every users.

ClausHamann

Navision is using applications roles to control permissions in SQL Server and maintaining additional permissions for these applications roles is more or less impossible.

I would add code in Navision to prevent certain users from modifying the field.

Regards

Claus

DenSter

You should use the Navision security functionality to manage permissions to individual objects, not SQL Server permissions.

Lion

Thanks for help

DenSter write:
You should use the Navision security functionality to manage permissions to individual objects, not SQL Server permissions.

But haw can I setup permission to the field direct in Navision?

DenSter

There is no field level security in NAV. There's an add-on that does this, but NAV doesn't provide field level security.

andreof

One way you can do it is as follow:

1- Create an empty role (e.g NoCreAcc).
2- Assign that role to the users that dont have permission to Modify the field
3- On the Validate trigger of the field just check to see if the user has the role

Lion

Hi

I found that when I create new user in Navision 4 program create new Application role in SQL server. When I change permission in this role they works OK. But name this role nothink talk to me because the name this role was very long number and I have problem to find proper role. Do you know how can I find role connected with my user?

ClausHamann

Your problem is not only to figure out the connection between the user and the application role. All application roles are dropped and then recreated each time you do a full synchronization of permission.

One way you can do it is as follow:

1- Create an empty role (e.g NoCreAcc).
2- Assign that role to the users that dont have permission to Modify the field
3- On the Validate trigger of the field just check to see if the user has the role

You can program this easily in Navision as suggested by andreof.

Regards

Claus

Lion

Yes, I agree that andreof's solution is very easy but my clent don't have developer licence and he wont to hange permission wiht his local administrator. That is reason what he don't accept this slution.

kriki

Lion wrote:

Yes, I agree that andreof's solution is very easy but my clent don't have developer licence and he wont to hange permission wiht his local administrator. That is reason what he don't accept this slution.

Your client doesn't need a developer license.
You just need a developers to program it (NSC's have those) and put the changed object in his DB. Add the role, and add users to that role. And that is it.