---
id: change/bcapps/9838
type: change
title: "#9838 Grant indirect read on Privacy Notice tables in Privacy Notice Impl."
summary: The Privacy Notice Impl. codeunit now grants indirect read permission on Privacy Notice and Privacy Notice Approval tables to allow non-SUPER users to check privacy notice approval state in Copilot and service sessions without NavPermissionException.
tier: official
language: en
tags:
  - fix
  - main
  - bc30
  - codeunit privacy notice impl.
system: development
review:
  state: reviewed
  by: opus
  at: "2026-10-08T02:10:53.023Z"
  flags: []
generated:
  at: "2026-10-08T01:26:53.141Z"
  pipeline: 0.2.0
  prompts:
    extract-change: 1
  input_hash: d66fa8d19504355f1b0d82b6c4178c5c777291e7
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/pull/9838
    title: "microsoft/BCApps#9838: Grant indirect read on Privacy Notice tables in Privacy Notice Impl."
    date: "2026-07-30"
    commit: d66fa8d19504355f1b0d82b6c4178c5c777291e7
    t: null
    quote: null
links:
  learn: []
  objects:
    - object/codeunit/1565
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
  changes: []
number: 9838
repo: microsoft/BCApps
source_id: bcapps-prs
url: https://github.com/microsoft/BCApps/pull/9838
kind: pr
base_branch: main
major: "30"
merged_at: "2026-07-30T14:42:40Z"
author: onbuyuka
author_type: User
community_contribution: false
labels:
  - "AL: System Application"
  - "Team: Integrations"
change_class: code
change_kind: fix
behavior_change: true
breaking: false
files:
  count: 1
  additions: 2
  deletions: 1
  al: 1
apps:
  - System Application
objects_touched:
  - key: codeunit/1565
    page: codeunit/1565
    type: codeunit
    id: 1565
    name: Privacy Notice Impl.
    app: System Application
    status: modified
objects_unjoined: []
obsoletions: []
backports: []
fixes_issues: []
work_items:
  - 644260
systems:
  - development
quote: null
joined_against:
  major: "30"
  commit: ecbc028c25dbe83b61313bc566e6c1d41184bb1c
---

# #9838 Grant indirect read on Privacy Notice tables in Privacy Notice Impl.

> The Privacy Notice Impl. codeunit now grants indirect read permission on Privacy Notice and Privacy Notice Approval tables to allow non-SUPER users to check privacy notice approval state in Copilot and service sessions without NavPermissionException.

[Pull request](https://github.com/microsoft/BCApps/pull/9838) · merged into `main` (BC30) on 2026-07-30 by onbuyuka · 1 file (+2 -1), 1 AL · fix · tier official · reviewed (checked by Opus)

## What changed

- Privacy Notice permission in the codeunit changed from im to rim, adding read
- New read permission added for Privacy Notice Approval, needed for the Enabled/Disabled FlowFields
- Lets non-SUPER users pass the capability check in service, Copilot and MCP sessions before a company is opened
- Depends on a platform change that gives these system tables inherent indirect read (rX)
- Keeps least privilege since only objects that declare indirect read can read the tables
- Behaviour changes for users or extensions.

## AL objects touched

- [Codeunit 1565 "Privacy Notice Impl."](../../objects/codeunit/1565.md), System Application: modified

## Context

- Work items: AB#644260
- Labels: AL: System Application, Team: Integrations
- Systems: development

Source: metadata of a merged pull request in microsoft/BCApps (bcapps): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).