Superuser permissions error [RESOLVED]

jelittlejohn

Hello all. I am having a problem with permissions in Navision that is not allowing me to make any change to an object.

Version: US 3.01.B (3.60)
Platform: SQL

This is a long-standing Nav SQL installation and I have never had this problem until yesterday. My normal procedure is to open Navision, change the license to that of our solution center, then open the database with a superuser ID. As of yesterday, however, whenever I modify an object and try to save with compile, I receive an error “You do not have read permission for the Value Entry table,” or “You do not have modify permission for codeunit 5205” or whatever. This happens with all types of objects.

Needless to say, I have reviewed the permissions for the SUPER role, and they are complete and correct. I have verified that the login I am using has the SUPER role. The license is our most recent one, issued in July of this year. I have run DBCC Checktable on the SQL tables Permission, User, User Roles, etc. The system will not allow me to add new users to compare to…

Any ideas???

bbrown

What sql roles have been assigned to the login?

ccbryan63

I'll answer for Jack, since it's my issue and he was kind enough to post it for me. The Navision login I'm using has sysadmin permissions on the SQL side.

Chandler

Savatage

jelittlejohn wrote:

This is a long-standing Nav SQL installation and I have never had this problem until yesterday. My normal procedure is to open Navision, change the license to that of our solution center, then open the database with a superuser ID.

That was nice of them :-k Do they know you still have a copy of their license? :whistle:

Anyway, I don't have a 5205 Myself. Even Solution Center Licenses don't always allow access to 3rd party add-on's number ranges.

If that is what is happening in this case. PS What are you trying to change in the codeunit? & what is it's name? Is it related to Employee stuff?

ccbryan63

Harry:

We are the solution center, so what I meant when I wrote Jack's post was that I change from the client's license to ours.

I confess that the codeunit number I used in my example was random and evidently wrong, but it's entirely beside the point since I used it purely for illustration and the stated problem is that I can't save/compile any object at all -- table, codeunit, form, etc. The error message always refers to not having permission, but not always to the same object or type of object. To wit:

The codeunit I am actually trying to edit is 5804 ItemCostManagement. The error it gives is "You do not have read permission for table Value Entry." Obviously I do have read permission for Value Entry, since I can run it and browse it and navigate to and from it with no problem. Codeunit 5804 has (in this install anyway) an indirect read permission for Value Entry in its properties, so just for a test I deleted that reference. After I did that and tried to save, the error became "You do not have permission to modify codeunit ItemCostManagement." As I said before I get the same type of error if I try to modify the Item Card or the Customer Table or anything else.. even if the only change is a few characters in the documentation trigger.

And to reiterate from the first post, I am logged in as superuser with a developer license.

Chandler

kine

And to reiterate from the first post, I am logged in as superuser with a developer license.

For me it seems that it is not correct "developer license". Can you tell us the numbers from your license ID? I mean the AAA part of the ID:

License number : CC-XX-AAA-11111-L

It must be = 004 to be a developer license. And you must have granule 7200 and 7300 in it. (Application builder, Solution developer).

ccbryan63

Guys, I am a Navision developer who works for a Navision solution center. Something has happened at this client that is keeping us from making changes to objects. My colleagues and I are stumped. I'm not carelessly using the wrong license or forgetting to log in as a superuser.

With all respect, I'm asking if anyone else has ever encountered this problem or has any ideas beyond the most obvious ones.

I really appreciate your time considering this.

Chandler



License number : US-ZA-004-0AMZ9-P

7,110 Report & Dataport Designer
7,120 Form Designer
7,130 Table Designer
7,140 XML Designer
7,200 Application Builder
7,300 Solution Developer
7,400 Custom area objects

DenSter

I've seen this many times, and every one of them was explained by adding or removing permissions. The access control doesn't just stop working.

I don't mean to be obvious, but are you sure that nobody added or removed any permissions to the SUPER role? That role should have an entry for all object types, with a value of 0 in the object number. Anything more or less will screw up the permissions.

kine

The license looks correctly. Try to open virtual table "License Permissions" and check permissions for the objects. there must be full permissions for all (Insert,Modify,Delete,Run). If there are just Indirect permissions, something is wrong. Than check that SUPER role is not modified and that there are assigned full permissions for Insert,Modify,Delete.

ccbryan63

The SUPER role has read, insert, modify, delete, and execute permission set to yes for object 0 in TableData, Table, Form, Report, Dataport, Codeunit, and System object types. No more, no less. The login I'm using has the SUPER role assigned to it.

Hey -- if this were easy I wouldn't be bothering you guys with it!

Chandler

Savatage

Just to be absolutely clear..

It's just THAT one client. I mean your license can change that codeunit for other clients?

DenSter

Do you have any other roles? Try removing all other roles.

ajhvdb

export the objects, create a native database, import the objects and modify your object. If this works you know where to look.

tpopowicz

Try this, go to your itemcostmanagement codeunit, go to design, click on your properties, and check your permissions, they should say TableData Value Entry=r

If you look into the ellipsis it will show READ for value entry object. I'm not sure if this will work for you, but I vaguely remember getting this same problem a couple years back. It seems to come up for no particular reason at all.

ccbryan63

Denster - The login had three roles: two SUPER (one for each company) and an ALL USERS. I deleted the ALL USERS role, left Navision, came back -- no change.

ajhvdb - Sorry but I don't understand what that would show me. That the problem is in SQL?

tpopowicz - The property you describe is there in ItemCostManagement. I'm not sure what you're suggesting. I have tried removing that property, but as I said earlier, that just changes the error message. And as I have said several times, I can't modify any object at all, so I seriously doubt that it is a problem with ItemCostManagement or any single object.

Chandler

DenSter

does your SQL login have db_owner rights to the database?

ccbryan63

User mapping showed SQL login to have: db_datareader, db_datawriter, db_securityadmin, and public permissions checked for the database in question (which I believe were all that were set up before this problem). I added db_owner, saved it, restarted Navision and logged in... no change.

Chandler

kine

Denster - The login had three roles: two SUPER (one for each company) and an ALL USERS. I deleted the ALL USERS role, left Navision, came back -- no change.

This is your problem. You must have SUPER without specifying the company. Else it is not full SUPER. Just add role SUPER without filling the company name.

ccbryan63

Thank you Kamil. That was it. Don't know how that got screwed up but it's unscrewed now.

I appreciate everyone's suggestions!

Chandler

kine

It is commond error when changing the security to have permissions per company.

Savatage

I knew someone would figure it out eventually \:D/

ara3n

I think MS needs to change the permission error and state the company name if record is for a different company.

Savatage

Actually I have seen a few post recently that have good suggestions for MS. Hopefully the new MS forum members are reading these and taking notes [-o<