locked
crm 2011 remove create new for some users RRS feed

  • Question

  • Hi all,

         I have a custom product and i dont want allow one system administrator user to create new product. plz help me to find the solution.

    Regards,

    Siva. 


    Thanks in Advance Siva

    Thursday, June 7, 2012 2:38 PM

All replies

  • Since you have already assign the System Administrator role to that user, you can't restrict the create permission for the product only to that user.

    One of the solution is to create a custom security role (e.g. User Administrator) and grant all the permissions except Create permission of the product. But there is a loophole in that solution that such user can just update his own role grant the create permission to Product entity or simply assign the System Admin role to himself and do whatever he can.

    So, another foolproof but more difficult option is to write a plugin for the pre event of Create message in Product entity to check the domain login of the current user and throw and error if it matches to the names configured in the unsecure configuration.

    Thursday, June 7, 2012 3:51 PM
  • nothing can be done if a person have a system admin role .

    Linn is exactly right


    Ahmed - CRM Application Management

    Tuesday, June 12, 2012 6:45 PM