#9838 Grant indirect read on Privacy Notice tables in Privacy Notice Impl.
The Privacy Notice Impl. codeunit now grants indirect read permission on Privacy Notice and Privacy Notice Approval tables to allow non-SUPER users to check privacy notice approval state in Copilot and service sessions without NavPermissionException.
- 1files
- 1AL files
- 1objects
Pull request · merged into main (BC30) on 2026-07-30 by onbuyuka · 1 file (+2 -1), 1 AL · fix · tier official · reviewed (checked by Opus)
What changed
- Privacy Notice permission in the codeunit changed from im to rim, adding read
- New read permission added for Privacy Notice Approval, needed for the Enabled/Disabled FlowFields
- Lets non-SUPER users pass the capability check in service, Copilot and MCP sessions before a company is opened
- Depends on a platform change that gives these system tables inherent indirect read (rX)
- Keeps least privilege since only objects that declare indirect read can read the tables
- Behaviour changes for users or extensions.
AL objects touched
- Codeunit 1565 “Privacy Notice Impl.”, System Application: modified
Context
- Work items: AB#644260
- Labels: AL: System Application, Team: Integrations
- Systems: development
Source: metadata of a merged pull request in microsoft/BCApps (bcapps): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).