Permissions (Ver 3.6)

pramila

HI,

I am facing a simple but a strange problem.

I am trying to remove the delete permission from an object.

Simple as it sounds,

I went to Tools-> Security ->Roles -> Choose the RoleID I wanted to stop the permission -> Role -> Permission.

I was able to select 'empty' for the delete option.

However even after I log back into Navision again, I can still delete the record. I have superuser access.

Also, I cannot change the permission in the Execute Column. Currently it is set to 'Yes'..

Can anyone throw some light on this please.. Anyone faced with a similar scenario???

Marije_Brummel

If you have superuser access you can do everything in the database, so if you add a role with other settings, this is ignored.

Tim81

First of all: Permissions from Roles in Navision are handled additive. So if you have the SUPER-role nothing will be changed if you add another role. To test the functionality of a role, add a new database user and give him the needed roles (don't forget the ALL-role).

Second: The read, insert, modify, delete fields are just meaningful with TableData objects. If you set this fields for other object types, you just control the rights for the object designer for the objects.

Think about the execute column: can you execute "Table Data"?? Of course not, you can just execute Tables. Thats the reason why you cant change this value. It is set to yes for every new permission line with object type 'table data'.

The standard navision security concept gives every user rights to execute tables, forms, reports, dataports and codeunits (view the ALL-role to see this). But the user can just open the forms he has the rights for the table data the form is based on. So it is just needed to give permissions to table data in the other roles to set up different permissions (as you can see in all other roles). At least till version 3.7. The security concept had changed a little bit with 4.0.

Hope this helps!

pramila

Thanks so much Mark &Tim for your answers... Yes I managed to solve the problem.