The Super role of Microsft Dyanmics NAV contains all the permissions for the objects and system related activities in Microsft Dyanmics NAV. But when the same super role is being alloted to a user is SQL Server 2005 then you will notice the following scenarios:
Case -1:
The database is being restored and users are defined in the SQL Server 2005, and the same users are defined in the database logins in MS Dynamics NAV and the security is synchronized. Lets take two users user A and User B where user A is the dbo owner/sysadmin in SQL Server 2005 and in Navision the role assigned to the both the user A & B is SUPER. After the roles are assigned and the security is synchornized you wioll noticve that both the user/s A and B are able to acess all the object in NAV SP3(includes customized objects). Well till now you will feel that the super role in MS Dynamics NAV SP3 proprietory database is same as that of the NAV database in SP3.
Case -1:
The database is being restored and users are defined in the SQL Server 2005, and the same users are defined in the database logins in MS Dynamics NAV and the security is synchronized. Lets take two users user A and User B where user A is the dbo owner/sysadmin in SQL Server 2005 and in Navision the role assigned to the both the user A & B is SUPER. After the roles are assigned and the security is synchornized you wioll noticve that both the user/s A and B are able to acess all the object in NAV SP3(includes customized objects). Well till now you will feel that the super role in MS Dynamics NAV SP3 proprietory database is same as that of the NAV database in SP3.
Case-2:
Create a new object (table in which the client license permits to access the table say the obhect id is 50,000). Now import the object into the NAV Dtabase in SQL Server 2005. Now login to the system using the User A. You will notice that the user is able to access the table 50000. After you have verfied with the permission to the table of 50000 with the User-A, login using the user -B. Go tO the Object designer and try to run the object. The system will say that you donot have permission to the Object 50000.
Create a new object (table in which the client license permits to access the table say the obhect id is 50,000). Now import the object into the NAV Dtabase in SQL Server 2005. Now login to the system using the User A. You will notice that the user is able to access the table 50000. After you have verfied with the permission to the table of 50000 with the User-A, login using the user -B. Go tO the Object designer and try to run the object. The system will say that you donot have permission to the Object 50000.
Now you can see that both the users have been assigned the SUPER role but one of the user which not the dbo owner in SQL Server 2005 will not be able to have the acess. In SQL Server 2005 with NAV SP3 everytime you import a object ensure you run a Security Synchronize, as even the SUPER role (which is not the dbo owner/sysadmin in SQL SERVER 2005)will not be able to gain access to the objects.
No comments:
Post a Comment