Microsoft KB Archive/930610

= A new user unexpectedly can read a reassigned activity even if the Assign field is set to &quot;Cascade User-Owned&quot; in a relationship for the activity entity in Microsoft Dynamics CRM 3.0 =

Article ID: 930610

Article Last Modified on 8/15/2007

-

APPLIES TO


 * Microsoft Dynamics CRM 3.0

-



SYMPTOMS
Consider the following scenario in Microsoft Dynamics CRM 3.0:
 * A user creates an activity for an account.
 * The user configures a relationship between an entity and the activity entity. To do this, the user selects Cascade User-Owned in the Assign list in the appropriate relationship dialog box.
 * The user reassigns the activity of the entity to a new user.

In this scenario, the new user unexpectedly can read the activity. The activity should not be visible to the new user.

If the Assign list in the appropriate relationship dialog box is set to Cascade User-Owned, the cascade configuration does not move any inherited permissions to the new user. Therefore, the new user should be unable to access the activity or to read the activity.



hotfix information
A supported hotfix is now available from Microsoft. However, it is intended to correct only the problem that is described in this article. Apply it only to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next Microsoft Dynamics CRM 3.0 that contains this hotfix.

To resolve this problem immediately, contact Microsoft Customer Support Services to obtain the hotfix. For a complete list of Microsoft Customer Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

File information
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Microsoft Dynamics CRM 3.0 server

Microsoft Dynamics CRM 3.0 client for Microsoft Office Outlook Compatibility Release

Microsoft Dynamics CRM 3.0 client for Microsoft Office Outlook

Installation information
Install this hotfix on computers that are running the Microsoft Dynamics CRM server and the Microsoft Dynamics CRM client for Microsoft Office Outlook. To do this, follow these steps:  Click Start, click Run, type regedit, and then click OK. Follow the appropriate steps.  Microsoft Dynamics CRM server  In the registry, locate the following subkey:

 Right-click MSCRM, point to New, click DWORD Value, and then type AdjustPOAonAssign in the Name field. Double-click AdjustPOAonAssign, and then type 1 in the Value data field. Click Start, click Run, type iisreset, and then click OK.</li></ol> </li> Microsoft Dynamics CRM laptop client for Outlook <ol> In the registry, locate the following subkey:

</li> Right-click MSCRM, point to New, click DWORD Value, and then type AdjustPOAonAssign in the Name field.</li> Double-click AdjustPOAonAssign, and then type 1 in the Value data field.</li> Restart the Microsoft Dynamics CRM laptop client for Outlook.</li></ol> </li> Microsoft Dynamics CRM desktop client for Outlook

Restart the Microsoft Dynamics CRM desktop client for Outlook.</li></ul> </li></ol>

Prerequisites
You must have Update Rollup 2 for Microsoft Dynamics CRM 3.0 installed to apply this hotfix. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

927751 Update Rollup 2 for Microsoft Dynamics CRM 3.0 is available

Restart requirement
If you are prompted, restart the computer after you apply this hotfix.

Removal information
To remove this hotfix from a computer that is running Microsoft Windows Server 2003, Microsoft Windows XP, or Microsoft Windows 2000, use Add or Remove Programs in Control Panel. System administrators can use the Spuninst.exe tool to remove this hotfix from a computer that is running Microsoft Windows Server 2003, Microsoft Windows XP, or Microsoft Windows 2000.

The Spuninst.exe tool is located in the %Windir%\$NTUninstallKB930610$\Spuninst folder.

<div class="moreinformation_section">

MORE INFORMATION
When the security role contains the user-level read access to activities, a user in this security role can access the activities of an entity only. Additionally, this user can access the activities if the following conditions are true:
 * The user owns the activities of the entity.
 * The user has inherited permissions for the activities.

The owner of an account obtains inherited permissions for the new activity if the following conditions are true:
 * The user creates an activity for the account.
 * In the appropriate relationship dialog box for the entity and for the activity entity, the Reparent field is set to Cascade All.

For more information about the terminology that is used to describe Microsoft software updates, click the following article numbers to view the articles in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

887283 Microsoft Business Solutions CRM software hotfix and update package naming standards

Additional query words: nc

Keywords: kbhotfixserver kbqfe kbmbsmigrate kbpubtypekc KB930610

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.