We get this error message at the moment:

user with id [...] does not have ReadAccess right(s) for record with id [...] of entity Contact

when sending an e-mail in a specific but common scenario:

Security Setup:

We have got service departments working with Customer Service in several countries.

The Service Departments have got read rights for accounts and contacts within the Business Unit of their country. But all users have got append and append to rights on organization Level for activities and contacts

Business Case:

• Customer in a country writes an email to their local support
• In CC the customer has a contact from their HQ in another country
• E-Mail arrives directly in a Customer Service Queue
• The System resolves all found e-mail addresses to contacts
• Thereby also the e-mail adress of the contact in another country
• A user of the queue creates an answer for the e-mail
• The system copies all recipients into the answer
• After finishing the response the user clicks on "Send"

The user gets an error message becaus of missing read rights for the contact from another country

Proposed improvement:

When an user has got appropriate append rights to add an e-mail to a contact, then he is also able to send an e-mail to the contact.

So, if there are any neccessary read operations needed, they are executed with higher rights than user rights when sending the email.