User permissios to add users

Rainer

Hi there all,

I have a customer who is on high level of security and need to have two kind of users.

Do anybody know how to make permissions for these two users:

User 1
He may add a new user and nothing else

User 2
He may ad permissions to this new user

I have tried nearly everything but cannont get it solved.

Any help?

Marije_Brummel

If this is an exeptional scenario and the user realises that they are exeptional you might want to think out of the box. If you cannot solve it in NAV, which you have tried, then maybe you can solve it in SQL Server?

kine

I think that if user have no permissions to insert into table Member Of and Windows Access Control than he cannot assign roles (permissions). If he can insert into User table or Windows Login than he can create users in NAV. What is not working on this?

Rainer

The last I did for the User who may add permissions was to give permission to all tabels except Windows Logon User tabel.

Lets say he will add these permissions on a user:

ROLE = TEST
Permissions
· Customer, create, modidy, delete etc
· Vendor, create, modidy, delete etc

When the add those Roles on a user a error say "No permissions to modify Customer and Vendpr tabels" and that is not true.

kine

Extended or standard Security model?

Rainer

Standard

kine

If the error is really exactly "No permissions to modify Customer and Vendpr tabels" than it is some customization. Standard error message is only about one table each time, not about Customer and Vendor. There must be some additional settings you need to set in your system to allow user to edit these tables. Use debugger to look for the condition when this error is called.

Rainer

Anyway, I tried everything and prommise me, I know about setting up permissions and its not working. Never mind, I find another solution.

Marije_Brummel

I would look into creating someting in SQL Server. You can use triggers or something to program this.

Be careful to document this and tell your customer that they have a special solution that fits their special requirements.

kine

Rainer wrote:

Anyway, I tried everything and prommise me, I know about setting up permissions and its not working. Never mind, I find another solution.

It is why I am talking about customization made, which show this error. Have you tried debugger?

Rainer

First of all, I mean "believe me", not "prommise me", ofcourse.. :-)

How will you debug the code while insert or delete permissions? New feature maybe?

kr
Rainer

kine

As I told you, it is not about permissions, it is about customization and this must be done in code...

Rainer

Well, I dont see your point ofcourse its about permissions, thats my problem. Permissions to add, delete and modify permissions on one user.

kine

If there is error with text "No permissions to modify Customer and Vendpr tabels" as you wrote, than it is nothing with standard permissions but customization. There is no way how to get this error from standard permission system... that's my point... ;-)

David_Singleton

Hi Rainer,

I think Kamil is correct here. The message is not from Navision, so probably someone has written some code to do this. Just use debugger to find it.

Rainer

Ofcourse its standard permissions, its not possible to code in table for permissions. And ofcourse the error is comming form standard Attain, from permissions table.

Try, and you will see !!

Rainer

Kamil is not right here, I am right. Se my other message. Try by your self and watch I am right. I dont ask for help if I dont need help it does not make sense.

David_Singleton

Post a screen shot of the error, then I think you will see where your mistake is. :whistle:

matttrax

I'll confirm Kine and David's responses. That is absolutely, 100%, no doubt in my mind, NOT a standard NAV error message.

Rainer

Well, I really dont believe that you understand my problems:

USER ONE: He may add new Windows Logons
USER TWO: He may add roles/permissions to other users

USER TWO have permissions to all (ALL) tables in whole system, without tables to add new user.
USER TWO get a ERROR when he is insert new roles on a user. For an example : "You dont have permissions to modify Job Budget Line" or ".....G/L Acount" or ".....Customer"...or whatever is in that Role I want to add to a user.

Try it by yourself and see that I am NOT wrong. And guys, tell me how can you debug while you are adding new permissions or roles??? Please tell me that new feature. And again this is 100% standard, while its not possible to modify those objects.

This is my last "help" in this case, otherwice I give up.

matttrax

"You dont have permissions to modify Job Budget Line" and "No permissions to modify Customer and Vendpr tabels" are completely different error messages. The first is a standard error message. The second is not. Because you did not supply anyone with the EXACT error message you received the thread went off on a path that it didn't need to go down.

You are correct that you cannot debug that error message. Have you tried running client monitor or SQL profiler to see why the error might be occurring?

Rainer

Dear Sir,

I cannot upload PDF, MS Word or anything, please enter your e-mail and I send you screen dumps of all.