User with no Assign rights can still click Owner lookup?

Answers

• 

  

  0

  Sign in to vote

  Well no, because the security feature is for User assign only.

   

  if this user has a specific role not allowing her to assign, you can insert onLoad code to check her roles and disable the ownerid field to disalllow her to click on the ownerid.

   

  The code below checks for role 'System Administrator' if it is then it disables the ownerid field and if it isn't it dosen't.

   

  Add this to your onLoad of the Lead form.

  Code Snippet

  if(UserHasRole("System Administrator"))
  {
  function UserHasRole(roleName) 
  { 
   //get Current User Roles, oXml is an object 
   var oXml = GetCurrentUserRoles(); 
   if(oXml != null) 
   { 
    //select the node text 
    var roles = oXml.selectNodes("//BusinessEntity/q1:name"); 
    if(roles != null) 
    { 
     for( i = 0; i < roles.length; i++) 
     { 
      if(roles[i].text == roleName) 
      { 
  crmForm.all.ownerid.Disabled = true;
       return true; 
      } 
     } 
    } 
   } 
  crmForm.all.ownerid.Disabled = false;
   return false; 
  } 
   
  function GetCurrentUserRoles() 
  { 
   var xml = "" + 
   "<?xml version=\"1.0\" encoding=\"utf-8\"?>" + 
   "<soap:Envelope xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\http://schemas.xmlsoap.org/soap/envelope/\">http://schemas.xmlsoap.org/soap/envelope/\</A< A>>" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\http://www.w3.org/2001/XMLSchema-instance\">http://www.w3.org/2001/XMLSchema-instance\</A< A>>" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\">'>http://www.w3.org/2001/XMLSchema\">http://www.w3.org/2001/XMLSchema\">;" + 
   GenerateAuthenticationHeader() + 
   " <soap:Body>" + 
   " <RetrieveMultiple xmlns=\"http://schemas.microsoft.com/crm/2007/WebServices\">'>http://schemas.microsoft.com/crm/2007/WebServices\">http://schemas.microsoft.com/crm/2007/WebServices\">;" + 
   " <query xmlns:q1=\"http://schemas.microsoft.com/crm/2006/Query\http://schemas.microsoft.com/crm/2006/Query\">http://schemas.microsoft.com/crm/2006/Query\</A< A>>" xsi:type=\"q1:QueryExpression\">" + 
   " <q1:EntityName>role</q1:EntityName>" + 
   " <q1:ColumnSet xsi:type=\"q1:ColumnSet\">" + 
   " <q1:Attributes>" + 
   " <q1:Attribute>name</q1:Attribute>" + 
   " </q1:Attributes>" + 
   " </q1:ColumnSet>" + 
   " <q1:Distinct>false</q1:Distinct>" + 
   " <q1:LinkEntities>" + 
   " <q1:LinkEntity>" + 
   " <q1:LinkFromAttributeName>roleid</q1:LinkFromAttributeName>" + 
   " <q1:LinkFromEntityName>role</q1:LinkFromEntityName>" + 
   " <q1:LinkToEntityName>systemuserroles</q1:LinkToEntityName>" + 
   " <q1:LinkToAttributeName>roleid</q1:LinkToAttributeName>" + 
   " <q1:JoinOperator>Inner</q1:JoinOperator>" + 
   " <q1:LinkEntities>" + 
   " <q1:LinkEntity>" + 
   " <q1:LinkFromAttributeName>systemuserid</q1:LinkFromAttributeName>" + 
   " <q1:LinkFromEntityName>systemuserroles</q1:LinkFromEntityName>" + 
   " <q1:LinkToEntityName>systemuser</q1:LinkToEntityName>" + 
   " <q1:LinkToAttributeName>systemuserid</q1:LinkToAttributeName>" + 
   " <q1:JoinOperator>Inner</q1:JoinOperator>" + 
   " <q1:LinkCriteria>" + 
   " <q1:FilterOperator>And</q1:FilterOperator>" + 
   " <q1:Conditions>" + 
   " <q1:Condition>" + 
   " <q1:AttributeName>systemuserid</q1:AttributeName>" + 
   " <q1:Operator>EqualUserId</q1:Operator>" + 
   " </q1:Condition>" + 
   " </q1:Conditions>" + 
   " </q1:LinkCriteria>" + 
   " </q1:LinkEntity>" + 
   " </q1:LinkEntities>" + 
   " </q1:LinkEntity>" + 
   " </q1:LinkEntities>" + 
   " </query>" + 
   " </RetrieveMultiple>" + 
   " </soap:Body>" + 
   "</soap:Envelope>" + 
   ""; 
   
   var xmlHttpRequest = new ActiveXObject("Msxml2.XMLHTTP"); 
   
   xmlHttpRequest.Open("POST", "/mscrmservices/2007/CrmService.asmx", false); 
   xmlHttpRequest.setRequestHeader("SOAPAction"," http://schemas.microsoft.com/crm/2007/WebServices/RetrieveMultiple"); '>http://schemas.microsoft.com/crm/2007/WebServices/RetrieveMultiple">http://schemas.microsoft.com/crm/2007/WebServices/RetrieveMultiple"); ;
   xmlHttpRequest.setRequestHeader("Content-Type", "text/xml; charset=utf-8"); 
   xmlHttpRequest.setRequestHeader("Content-Length", xml.length); 
   xmlHttpRequest.send(xml); 
   
   var resultXml = xmlHttpRequest.responseXML; 
   return(resultXml); 
  }
  }

   

   

  Thursday, September 18, 2008 2:05 PM