Record read access based on field value in Dynamics CRM 2011

Question

Entity has a custom field based on which, some security roles should have access to records of that type and some should not.

Javascript can be used to close form after checking roles. But I'm looking for back end solution that will disabled access to this records in workflows and searches too.

For example, product should viewable by everyone if manufacturer is our company and only by Competitor Products Specialist if other.

Answer 1

You might be able to write a plugin that would automatically share the record with the appropriate Users/Teams. When somebody updates that field, the plugin would run and share/unshare the record according to your business logic.

Disclaimer: I haven't actually tried this before, and there may be performance issues if you have lots of records (and therefore lots of sharing records).

Answer 2

我最终编写了适用于pre-Retrieve事件的插件，并通过按字段添加附加过滤器来修改检索查询。