Team Members and Record Assignment
-
Team Members and Record Assignment
Hello All~
We have an issue where a user/member of a team can write to a record that is owned by the TEAM, without having to take ownership of the record (Assign to Me). Our understanding of security was that if the TEAM had the privs, the user would inherit or gain the ability to act on behalf of the team but the team nor its members would be impacted by individual user permissions. We’ve only started adding members to teams and have since discovered that being a member with WRITE privs, gives the member the privilege to WRITE to a record that the TEAM owns. The user has WRITE privs at USER level. The team role does <b style=”background-color: var(–bb-content-background-color); font-family: inherit; color: var(–bb-body-text-color);”>not have WRITE privs.
We need for the users to assign the record to themselves before making any edits to the record. We are discussing adding script to every form for all entities that the team would own in order to force the assignment of the record to the user. For reference, we are on D365 v9.1 on-prem.
Does anyone else have this concern? How do you do handle this? Do we have any other options other than locking down all fields using javascript/etc.?
Thank you in advance,
Chrys
Sorry, there were no replies found.
Log in to reply.