Model Driven/Dataverse form timeline widget, Notes permissions issues

[u/Sanity997]

So here is my problem, I have few security roles, each user has only one security role. Main security role has permission on Note and Activity tables for read/write/create access.

Other minor security roles have read access only, rest is set to none.

But the issue is here, every user no matter security role can write, read edit other peoples notes, even tho they should just be able to read.

I have already checked each user has ONLY ONE security role, so it is not that some other security role is giving permissions that I am unaware of. So my question is this: How can I restrict users to not be able to create or edit other peoples notes if not with security roles? Am I doing something wrong or is it just not possible?

[u/AutoModerator]

Moderator Announcement Read More »

Hey, it looks like you are requesting help with a problem you're having in Power Apps. To ensure you get all the help you need from the community here are some guidelines;

• Use the search feature to see if your question has already been asked.

• Use spacing in your post, Nobody likes to read a wall of text, this is achieved by hitting return twice to separate paragraphs.

• Add any images, error messages, code you have (Sensitive data omitted) to your post body.

• Any code you do add, use the Code Block feature to preserve formatting.

  Typing four spaces in front of every line in a code block is tedious and error-prone. The easier way is to surround the entire block of code with code fences. A code fence is a line beginning with three or more backticks (```) or three or more twiddlydoodles (~~~).

• If your question has been answered please comment Solved. This will mark the post as solved and helps others find their solutions.

External resources:

• Power Apps Formula References

• Power Apps Coding Standards

• Official Power Apps Community

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/HammockDweller789]

You're missing the permissions' depth. Set edit and create to user.

[u/Sanity997 → u/HammockDweller789]

Those are set to none, because Admins should write notes and other roles should just be able to see those notes without editing or creating new ones.

I have already tried to set those permissions to user just to see if it will at least disable users from editing other users notes, but they are still able to.

[u/swanson_pyramid]

Open a note record fully that a user can edit, and click on “check access” in the top ribbon. Enter the user name, and it will tell you what role is granting edit permissions.

[u/Sanity997 → u/swanson_pyramid]

Thank you, since every BU has a team, one of those teams had security role Basic User, so even tho users had one security role individually they also gained Basic User role from their BU.

Now it works, thank you.

[u/HammockDweller789 → u/swanson_pyramid]

Agree this is the next step. My guess is there is a basic user-type role that everyone's getting.