It can happen that an end user has assigned only indirect permissions for a certain object to a user. For example user might be allowed to update the Sales Line when a certain action is being run but he is generally not allowed to edit the Sales Lines directly in the Sales Order. Therefore he might have only the indirect permissions for modifying the Sales Line. The Action calls a codeunit that updates the Sales Line but the error appears during modify because the standard object does not have the indirect permission assigned. The solution is to change the Codeunit with additional parameter: "Permissions = TableData "Sales Line" = rm;". If the Codeunit is in the Base App at the moment it cannot be extended. The alternative would be to have a channel in which such requirement will be processed - perhaps ALAppExtensions repo.
Comments
Preparing an update, I found, that there are certain objects, who need further permissions than the user originally has.
For example, creating a new sales order needs the read permission for the bank accounts.
It would be helpful, if we could create an table extension with an indirect permission, but we can't.
The user has to get direct permission to read the bank accounts, which he schouldn't; he schoulkd only create an sales order, not more.
This is only an example and applies to other tables / pages / function as well.
Category: Development
This type of permission not assigned to a Codeunit can be found in Codeunit 7301- Whse. Jnl. Register Line
The Codeunit have already two permission set but is missing one for Bin Content, there is code where the Insert is trigger.
If you set indirect permission to Bin Content on Custom Permission Sets, when using for example Warehouse Picks and Want to register the Pick, will trigguer this Code
Category: Development
Business Central Team (administrator)
Thank you for this suggestion! Currently this is not on our roadmap. We are tracking this idea and if it gathers more votes and comments we will consider it in the future. Best regards, Business Central Team