locked
Privilege exception in log trace RRS feed

  • Question

  • Hi,

     

    I have notice that every day I have hundreds of exceptions regarding privileges such as:

    “Checking Privilege for UserId: {55688D1F-A724-DE11-AA34-005056832496}, PrivilegeId: {DBD3AD17-B6BD-46C8-8DB7-179FEC82C937}.”

     

    Where Privilege DBD3AD17-B6BD-46C8-8DB7-179FEC82C937 = prvReadOrganization and user 55688D1F-A724-DE11-AA34-005056832496 have administration rights.

     

    I have check many of them and it looks like user have necessarily privilege, but exceptions still appear.

     

    Is anyone knows what can call those exceptions, is it timeout?

     

     

    Regards,

    Mariusz


    Mariusz
    Monday, March 1, 2010 4:38 AM

Answers

  • I have remove admin role of that user and then gave him that role back. No more errors appears.


    Mariusz
    Thursday, July 1, 2010 10:50 PM

All replies

  • Monday, March 1, 2010 11:09 AM
    Moderator
  • Thanks for answear, but it is not that.

    That is the example of exception which I have been mention yesterday. User (efbcb1b7-bc03-df11-af13-005056832496 ) as admin have prvReadEntity privilege, but :

    [2010-03-01 10:49:04.7] Process: w3wp |Organization:fa230b6c-161d-446b-be78-0c4379846eb2 |Thread:    8 |Category: Exception |User: efbcb1b7-bc03-df11-af13-005056832496 |Level: Error | CrmException..ctor

                    at CrmException..ctor(String message, Int32 errorCode)

                    at CrmSecurityException..ctor(String message, Int32 errorCode)

                    at SecurityLibrary.CheckPrivilege(Guid user, Guid privilege, PrivilegeDepths requiredDepth, ExecutionContext context)

                    at RetrieveAllEntitiesRequest.Process(ExecutionContext context)

                    at MetadataService.Execute(MetadataServiceRequest request)

                    at RuntimeMethodHandle._InvokeMethodFast(Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner)

                    at RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)

                    at RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

                    at LogicalMethodInfo.Invoke(Object target, Object[] values)

                    at WebServiceHandler.Invoke()

                    at WebServiceHandler.CoreProcessRequest()

                    at SyncSessionlessHandler.ProcessRequest(HttpContext context)

                    at CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()

                    at HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

                    at ApplicationStepManager.ResumeSteps(Exception error)

                    at HttpApplication.System.Web.IHttpAsyncHandler.BeginProcessRequest(HttpContext context, AsyncCallback cb, Object extraData)

                    at HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)

                    at HttpRuntime.ProcessRequestNoDemand(HttpWorkerRequest wr)

                    at ISAPIRuntime.ProcessRequest(IntPtr ecb, Int32 iWRType)

    >Crm Exception: Message: SecLib::CheckPrivilege failed. Returned hr = -2147220960, User: efbcb1b7-bc03-df11-af13-005056832496, PrivilegeId: a3311f47-2134-44ee-a258-6774018d4bc3, ErrorCode: -2147220960

    Monday, March 1, 2010 9:07 PM
  • I have remove admin role of that user and then gave him that role back. No more errors appears.


    Mariusz
    Thursday, July 1, 2010 10:50 PM