Multiple web roles for same entity with different entity permissions isn't working as expected

[BinodNepal]

Hi All

I am in a situation where I have an entity linked to Account. e.g. Entity A,

I am trying to create 2 web roles, 1 read only, 2 Edit 

I did create 2 of those entity permission and 2 web roles.

Entity Permissions : 1, EntityA_ReadOnly. 2, EntityA_Edit and created 2 web roles accordingly. and assigned to those web roles respectively. Web roles in general section I have No for both Authenticated Users Role and Anonymous Users Role.

After that I have assigned the web role to a external user (contact) now the user only has role EntityA_ReadOnly but when I go to the portal I can see a submit button and the user can modify the Entity A. 

What I did again is from yje EntityA_Edit entity permission I removed the Edit permission and now the user is not able to edit but only able to read, this is what I want to achieve. the user only has the read only web roles assigned if you are thinking if I have assigned both the roles.

Now if I go back and give edit permission on that EntityA_Edit entity permission the same user can make changes to the data, without the user having the Edit web role, it is driving me crazy I must be missing a step somewhere. The scope from Entity A to Account is a Parent Scope and Account entity permission is Read Only.

I have put this question on one of the thread as a reply question thought it would be better to have it's own question.

Your help is highly appreciated.

thanks

Binod

[chleverenz]

Hi together,

i had a call from a colleague today with the same sort of issue.  From my perspective, he set up everything right, but saw too many accounts. It ended up in deleting the old contact, setting it up again, assigning the same roles again and it worked. In my opinion, this was a cache issue. Unfortunately i can not prove due to the deletion...

We cleared the cache several times and restarted the portal several times without success. So, sometimes the restart (which should really empty everything) did not work which i also had in another project, where we literally had to switch it off and on again which then resolved our cache issues.

Caching is great but for development purposes it is obviously a pain in...

So, lesson learned: when restarting the portal make sure that the portal really disappears for a few moments...

have fun,

  Christian

[BinodNepal]

thanks Christian 

I will try to reset the portal as mentioned and see if it behaves as expected. will inform you on my progress.

thanks

binod

[BinodNepal]

Hi Christian

Clearing the cache hasn't helped, now I will try to remove the user and add back in and see if it works

Regards

Binod

[BinodNepal]

tried deleting the user and adding back in and assigning the only role [>>> Role: Product Record - Readers]

still the same issue, the user can Submit the changes. The Submit button is still visible.

thanks

Binod

[Pranjali · Accepted solution]

Hey Binod 

Have to checked if the Authenticated users is set to 'yes' for your web role.

To me it looks like that is your issue.

Cheers!

Pranjali

[justinburch]

Hi  @BinodNepal,

If I'm understanding correctly, you'll want to create two Account level permissions - one Read, and one Read/Write.

If your edit permission for EntityA is of Parent Scope, then the entity permission is always applied to any Web Role when its parent (parent's parent, so on) is added - so no need to ever associate an Entity Permission of scope "Parent" to any Web Roles - which means it seems like the Parent Permission might actually be the issue.

I hope this helps,

Justin