Extension available for all users

rajyraman / Levelup-for-Dynamics-CRM

Chrome, Edge Chromium and Firefox Extension for Dynamics CRM/365/Power Apps Power users

MIT License

191 stars 67 forks source link

Extension available for all users #201

Open AnnaCasasAlarcon opened 2 years ago

AnnaCasasAlarcon commented 2 years ago

Browser Version: 5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36
Extension Version: 3.5.8
----------------------------------------------------------
[DESCRIBE ISSUE HERE]

Any user can impersonate as anybody and can modify records that by roles can't. is there any way to restrict the extension only to the users to have the admin role?

jacobbates commented 2 years ago

Hey @AnnaCasasAlarcon, impersonation should only be possible in dynamics with the prvActOnBehalfOfAnotherUser permission. Has this been granted to users in the security roles? Assume System Admins would be an exception.

https://docs.microsoft.com/en-us/dynamics365/customerengagement/on-premises/developer/org-service/impersonate-another-user