Check privileges on current record (PCF component Dataverse/MDA)

(0) Share

Report

Posted on by Elowy GrootCRM

153

Hi to all!

I would like to know how I can query if the current user has create/update privileges on the current record.

So an update button (within the PCF component) may be shown or not.

Feels basic, but I'm new into this 🙂

Thanks a lot!

Elowy.

Categories:

Power Apps Pro Dev & ISV

I have the same question (0)

All responses (4)

Answers (1)

cchannon 4,702 Moderator on at

Like (1)

Report
Copy link

Link copied!

In Client script, that would be formContext.getAttribute(arg).getUserPrivilege()

In a PCF, it is context.utils.hasEntityPrivilege(entityTypeName, privilegeType, privilegeDepth)

Was this reply helpful? Yes No
Elowy GrootCRM 153 on at

Like (0)

Report
Copy link

Link copied!

Thanks for your response, Cchannon!
If I just want to check if a user has write access to (for example) an account record with an owner. What should I use for privilegeDepth? Or isn't that as simple as one statement and do I have to check all depths?

Was this reply helpful? Yes No
Verified answer

cchannon 4,702 Moderator on at

Like (1)

Report
Copy link

Link copied!

Well, it depends on your security model and the roles available. If your users only ever have BU level privs or no privs, then there is no reason to check if they have Global. That said, yeah, unfortunately there is no direct api implementation in PCFs for RetrievePrincipalAccessRequest.

Your only alternative is to create the Dataverse Web API request yourself and send it, which is absolutely do-able, just a fair bit more work. Also worth noting, the WebApi.execute() function does exist, it just isn't documented by Microsoft so if you're comfortable with an unsupported approach, you can get to the RetrievePrincipalAccessRequest very quickly that way.

Was this reply helpful? Yes No
Elowy GrootCRM 153 on at

Like (0)

Report
Copy link

Link copied!

Thanks again!
So if I use hasEntityPrivilege for the Account entity to check whether the user has write access, the condition will be something like:

- ( hasEntityPrivilege (Write, Global) ) or
- ( ( hasEntityPrivilege (Write, Deep) or hasEntityPrivilege (Write, Local) ) and user.BU is record.BU ) or
- ( hasEntityPrivilege (Write,Basic) and ( user == record.owner or user.team == record.owner ) )

Regards,
Elowy.

Was this reply helpful? Yes No