locked
Security priveledge error on creating record from subgrid RRS feed

  • Question

  • Hi All,

    I am facing a security issue where I have a subgrid of a custom entity in opportunity form. When I click on the subgrid and try to add a new record the new record form opens and when I click save I get an error that the user does not have sufficient privileges and record is not created. I am having the role of system administrator and also I have cross checked the rights of both the entities assigned its having all privileges organization level access. Even checked the form security access levels of both the entities its display to everyone.

    But there is an exception if the record in opportunity is created i.e. owned by me then I am able to perform the operations but not for other records. Since I have System Admnin rights I should be able to perform the operations to all the records regardless of ownership of the record isn't it??

    Find below the screen shot of the error and also the error log file

     

    Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=5.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: Principal user (Id=2d56b9ec-2402-e211-ac7c-00265a7655ba, type=8) is missing prvReadbis_billinginformationstaffing privilege (Id=f0e45921-e7a7-4204-856b-f824ca474b38)Detail:
    <OrganizationServiceFault xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/xrm/2011/Contracts">
      <ErrorCode>-2147220943</ErrorCode>
      <ErrorDetails xmlns:d2p1="http://schemas.datacontract.org/2004/07/System.Collections.Generic" />
      <Message>Principal user (Id=2d56b9ec-2402-e211-ac7c-00265a7655ba, type=8) is missing prvReadbis_billinginformation privilege (Id=f0e45921-e7a7-4204-856b-f824ca474b38)</Message>
      <Timestamp>2012-12-06T06:20:23.6059831Z</Timestamp>
      <InnerFault i:nil="true" />
      <TraceText i:nil="true" />
    </OrganizationServiceFault>


    Sushant Sarkar Microsoft CRM Dynamics Engineer


    Thursday, December 6, 2012 7:01 AM

Answers

  • Hi,

    Did you checked if the owner of the opportunity has enough privileges to read the custom entity. Regarding what is configured in the relationship of this two entities the owner of the upper data must have read privileges on the linked data. Check which user is behind the principal user id mentioned in the error message and give the required privileges to this user!

    Best regards,

    Andreas


    Andreas Buchinger
    Microsoft Dynamics Certified Technology Specialist
    MCPD: SharePoint Developer 2010

    • Marked as answer by Sushant Sarkar Wednesday, December 12, 2012 4:33 AM
    Thursday, December 6, 2012 9:53 AM

All replies

  • When you create a new security role from scratch and then assign only that role to a system user and when you log to the CRM site you might get the above mentioned error.

    This is because you haven't given read permission to the View in the Customization entity.

    Once this is done the system would start working for you.

    Madhu Sudhan.M

    Thursday, December 6, 2012 7:05 AM
  • Hi Sushanth this may be  helpful

    http://social.microsoft.com/Forums/en/crm/thread/a558c319-e98a-4b71-9744-45f7c35e2e46

    http://mscrmtools.blogspot.in/2011/02/crm-2011-and-security-exception.html

    Thursday, December 6, 2012 7:06 AM
  • Hi Sushanth

    This would solve your problem

    http://ms-crm-2011-beta.blogspot.in/2011/09/insufficient-permission-principal-user.html

    Thursday, December 6, 2012 7:11 AM
  • Hi Madhu,

    I am not creating any custom user role I am having the role of default CRM Sytem Administrator role which will be having organization access to all the records.


    Sushant Sarkar Microsoft CRM Dynamics Engineer

    Thursday, December 6, 2012 7:16 AM
  • Hi Nandan,

    Thanks for sharing the links I have cross checked and all the permissions are assigned still getting the same error.


    Sushant Sarkar Microsoft CRM Dynamics Engineer

    Thursday, December 6, 2012 7:18 AM
  • sushant  according to the above error  which i seen you do not sufficient privileges

    you need to check it once i think you are missing some thing in that privileges

    the user which you login check it perfectly whether it contains all privileges or used any javascript or plug-in on assign function check those it.


    ms crm

    Thursday, December 6, 2012 7:45 AM
  • Hi Aushton,

    I again checked all the user roles even tried creating a new user and assigning role to it still getting the same error also as you mentioned for both entities I have checked the plugins and javascripts none are working on assign neither checking for any admin roles. Any other possibilities that i need to look into???


    Sushant Sarkar Microsoft CRM Dynamics Engineer

    Thursday, December 6, 2012 9:00 AM
  • Hi,

    Did you checked if the owner of the opportunity has enough privileges to read the custom entity. Regarding what is configured in the relationship of this two entities the owner of the upper data must have read privileges on the linked data. Check which user is behind the principal user id mentioned in the error message and give the required privileges to this user!

    Best regards,

    Andreas


    Andreas Buchinger
    Microsoft Dynamics Certified Technology Specialist
    MCPD: SharePoint Developer 2010

    • Marked as answer by Sushant Sarkar Wednesday, December 12, 2012 4:33 AM
    Thursday, December 6, 2012 9:53 AM
  • Yeah that's right..but this webservice Exception is just because of it..

    since there is no inner fault

    Give read privilege on  your custom entity(billinginformationstaffing) and check.


    Unsupported anyway..

    Thursday, December 6, 2012 10:02 AM
  • so sushant just reset your iis server (may be it works am not sure about it try it)

    ms crm

    Thursday, December 6, 2012 10:48 AM