A new user unexpectedly can read a reassigned activity even if the Assign field is set to "Cascade User-Owned" in a relationship for the activity entity in Microsoft Dynamics CRM 3.0

Consider the following scenario in Microsoft Dynamics CRM 3.0:

• A user creates an activity for an account.
• The user configures a relationship between an entity and the activity entity. To do this, the user selects Cascade User-Owned in the Assign list in the appropriate relationship dialog box.
• The user reassigns the activity of the entity to a new user.

In this scenario, the new user unexpectedly can read the activity. The activity should not be visible to the new user.

If the Assign list in the appropriate relationship dialog box is set to Cascade User-Owned, the cascade configuration does not move any inherited permissions to the new user. Therefore, the new user should be unable to access the activity or to read the activity.

This problem was corrected in Microsoft Dynamics CRM 3.0 Update Rollup 3.
For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Microsoft Dynamics CRM 3.0 serverMicrosoft Dynamics CRM 3.0 client for Microsoft Office Outlook Compatibility ReleaseMicrosoft Dynamics CRM 3.0 client for Microsoft Office Outlook

Installation information

Install this hotfix on computers that are running the Microsoft Dynamics CRM server and the Microsoft Dynamics CRM client for Microsoft Office Outlook. To do this, follow these steps:

1. Click Start, click Run, type regedit, and then click OK.
2. Follow the appropriate steps.
   • Microsoft Dynamics CRM server
     1. In the registry, locate the following subkey:
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM
     2. Right-click MSCRM, point to New, click DWORD Value, and then type AdjustPOAonAssign in the Name field.
     3. Double-click AdjustPOAonAssign, and then type 1 in the Value data field.
     4. Click Start, click Run, type iisreset, and then click OK.
   • Microsoft Dynamics CRM laptop client for Outlook
     1. In the registry, locate the following subkey:
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\MSCRMClient
     2. Right-click MSCRM, point to New, click DWORD Value, and then type AdjustPOAonAssign in the Name field.
     3. Double-click AdjustPOAonAssign, and then type 1 in the Value data field.
     4. Restart the Microsoft Dynamics CRM laptop client for Outlook.
   • Microsoft Dynamics CRM desktop client for Outlook
     
     Restart the Microsoft Dynamics CRM desktop client for Outlook.

Prerequisites

You must have Update Rollup 2 for Microsoft Dynamics CRM 3.0 installed to apply this hotfix. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Restart requirement

If you are prompted, restart the computer after you apply this hotfix.

Removal information

To remove this hotfix from a computer that is running Microsoft Windows Server 2003, Microsoft Windows XP, or Microsoft Windows 2000, use Add or Remove Programs in Control Panel. System administrators can use the Spuninst.exe tool to remove this hotfix from a computer that is running Microsoft Windows Server 2003, Microsoft Windows XP, or Microsoft Windows 2000.

The Spuninst.exe tool is located in the %Windir%\$NTUninstallKB930610$\Spuninst folder.

When the security role contains the user-level read access to activities, a user in this security role can access the activities of an entity only. Additionally, this user can access the activities if the following conditions are true:

• The user owns the activities of the entity.
• The user has inherited permissions for the activities.

The owner of an account obtains inherited permissions for the new activity if the following conditions are true:

• The user creates an activity for the account.
• In the appropriate relationship dialog box for the entity and for the activity entity, the Reparent field is set to Cascade All.

For more information about the terminology that is used to describe Microsoft software updates, click the following article numbers to view the articles in the Microsoft Knowledge Base: