Multiple web roles for same entity with different entity permissions isn't working as expected

[BinodNepal]

Hi All

I am in a situation where I have an entity linked to Account. e.g. Entity A,

I am trying to create 2 web roles, 1 read only, 2 Edit 

I did create 2 of those entity permission and 2 web roles.

Entity Permissions : 1, EntityA_ReadOnly. 2, EntityA_Edit and created 2 web roles accordingly. and assigned to those web roles respectively. Web roles in general section I have No for both Authenticated Users Role and Anonymous Users Role.

After that I have assigned the web role to a external user (contact) now the user only has role EntityA_ReadOnly but when I go to the portal I can see a submit button and the user can modify the Entity A. 

What I did again is from yje EntityA_Edit entity permission I removed the Edit permission and now the user is not able to edit but only able to read, this is what I want to achieve. the user only has the read only web roles assigned if you are thinking if I have assigned both the roles.

Now if I go back and give edit permission on that EntityA_Edit entity permission the same user can make changes to the data, without the user having the Edit web role, it is driving me crazy I must be missing a step somewhere. The scope from Entity A to Account is a Parent Scope and Account entity permission is Read Only.

I have put this question on one of the thread as a reply question thought it would be better to have it's own question.

Your help is highly appreciated.

thanks

Binod

[MarkBiggerstaf]

Hello Binod,

This is unusual behavior you are explaining in your post.  With the Read Only permission, we should not be seeing the Submit button.

My recommendation would be to open a Support Ticket for a full investigation.

Thanks,

Mark Biggerstaff

Dynamics Support

[BinodNepal]

Thanks Mark, I have raised a support ticket.

[OliverRodrigues]

Hi

By any chance do you also have another Entity Permissions to that entity assigned to the Authenticated Web Role?

------------

If you like this post, give a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users find it.

[OliverRodrigues]

Hi

By any chance do you also have another Entity Permissions to that entity assigned to the Authenticated Web Role?

------------

If you like this post, give a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users find it.

[BinodNepal]

Hi Oliver

I do not have any other entity permissions on that Entity beside those 2 mentioned above, Read only and Update. Parent entity permission is an account for that entity and account do have other child permissions. Do you think the child permissions on account might have that effect? If so it will still be an issue from what I am trying to achieve. 

thanks for your reply.

[OliverRodrigues]

Can you place below liquid code into maybe your Web Page (Content web page) or a Web Template.. this will show you the current user's roles, so we can understand if that user has both Readonly and Edit Web Role

{% for r in user.roles %}    
    <p> >>> Role: {{ r }}</p>  
{% endfor %}

[BinodNepal]

Hi Oliver

I have placed the code and I am getting this:

>>> Role: Product Record - Readers

>>> Role: Factory Audit Authenticated User

the second role has "Authenticated Users Role" in it, the user doesn't directly has that role assigned, 

thanks

Binod

[OliverRodrigues]

Yes that's expected, the authenticated Web Role is always assigned to a user once they log in to the Portals

that's why my previous question I asked if you have any other Entity Permissions to the authenticated Web Role, as this could be conflicting

by any change would the "Factory Audit Authenticated User" Web Role represent your "Edit" Web Role?

[BinodNepal]

the "Factory Audit Authenticated User" Web Role has write permissions to other entity and not to the Entity mentioned.