Open Forum

Expand all | Collapse all

Restricting access to Federal ID # field in Vendor

  • 1.  Restricting access to Federal ID # field in Vendor

    Posted Oct 01, 2019 11:37 AM
    Hi All,

    We use NAV 2017 and need to restrict view access to the Federal ID # field in the Vendor Card as that information tends to be very sensitive.  Vendor table 27 read access is everywhere in the permission sets, including BASIC and we have multiple roles that touch that table.  We want to use permissions or other in-app means of controlling who can view that field without involving our partner (and spending $$).

    Is there a way to hide individual fields from the majority of users without ​using database masking or working with developers?

    #NAV2017 #Functional #ControlsandCompliance​​​

    ------------------------------
    Patrick Akins
    Supply Chain Manager - Business Analyst
    Wilks Brothers
    Cisco TX
    ------------------------------
    Conference-BCNAVUG_200x200


  • 2.  RE: Restricting access to Federal ID # field in Vendor

    TOP CONTRIBUTOR
    Posted Oct 01, 2019 11:55 PM
    Without spending money, there are not many options.  The first option is to purchase the EasySecurity add-on from MergeTool.com.  This add-on offers field level security.

    If you know your way around the Object Designer in the Development Environment, you can change the HIDE VALUE property for the field on the Vendor Page 26 (or on table 23).  This will of course change hide the value for everyone.  If you do this to page 26, you can create a custom page that is a copy of page 26 except on your custom page you will not hide the field and you will only provide access to this page to the employees who are allowed to view the field.

    If you do want to involve your developers or partner, it is probably not a big modification to hide the field based on user ID.

    Now with BC and extensions in the future, there will be a different way to handle this so that you don't change the base objects as I described above.

    ------------------------------
    Lewis Rosenberg
    IT Manager
    Mars Fishcare
    Chalfont PA
    ------------------------------------------------------------------------
    BCUG/NAVUG All-Star
    BCUG/NAVUG Board of Advisors, Chairperson
    BCUG/NAVUG Programming Committee

    Twitter: @RosenbergL
    LinkedIn: https://www.linkedin.com/in/rosenbergl
    ------------------------------------------------------------------------

    NAVUG/BCUG Summit (navugsummit.com)
    Orlando, FL - October 15-18, 2019

    Come hear me speak:
    GET50 - All About NAV/BC Security
    Friday, October 18, 2019
    9:45 AM - 10:45 AM
    ------------------------------

    Conference-BCNAVUG_200x200


  • 3.  RE: Restricting access to Federal ID # field in Vendor

    TOP CONTRIBUTOR
    Posted Oct 02, 2019 07:49 AM
    A super easy mod to fix this is to set the AccessByPermissions property for the "Federal Id No." on Pages 26 + 27 to this: TableData Vendor=I

    When the Vendor Page is opened the users permissions are checked and if they do not have Vendor Insert permission it will hide the "Federal ID No." field.  If you go to customize the page you will not see "Federal ID No." as an option as well.

    But there is a bug (at least in our NAV 2018 version).  A user can still got o Help, About this Page and see all the fields on the table including the "Federal ID No.".  You would need to disable the ability to "Zoom" records by removing this from their permissions.  It is Object Type = System, Object ID = 5330.  Once you remove this they can no longer do a zoom anywhere in the system.

    ------------------------------
    Jason Wilder
    Senior Application Developer
    Stonewall Kitchen
    York ME
    ------------------------------

    Conference-BCNAVUG_200x200


  • 4.  RE: Restricting access to Federal ID # field in Vendor

    TOP CONTRIBUTOR
    Posted Oct 02, 2019 12:07 PM
    Hi Patrick,

    One totally free thing you can do immediately is turn on the Change Log for Table 23 (Vendor). It won't prevent user changes, but you can at least track any change to the Vendor Fed ID# field and see which user made the change. We track all changes made to Vendor records in our NAV 2017 implementation.

    More info at:

    https://docs.microsoft.com/en-us/dynamics-nav-app/across-log-changes

    ------------------------------
    Brian Bates
    Chair, NAVUG Southern California Chapter
    IT Project Manager, Power Plus!
    ANAHEIM CA
    ------------------------------

    Conference-BCNAVUG_200x200


If you've found this thread useful, dive deeper into User Group community content by role