PrivilegeDepth.RecordFilter (16)

RELEASE_NOTES.md

@@ -1,3 +1,6 @@
+### 1.19.0 - 5 August 2026
+* Fix: Handle PrivilegeDepth.RecordFilter like PrivilegeDepth.Global instead of throwing exception
+
 ### 1.18.8 - 14 July 2026
 * Fix: Align plugin Target with Dataverse for system-managed fields (#344)
 

src/MetadataGen/MetadataGenerator.Core/Readers/SecurityRoleReader.cs

@@ -193,6 +193,7 @@ private static PrivilegeDepth PrivilegeDepthToEnum(int privilegeDepth)
             2 => PrivilegeDepth.Local,
             4 => PrivilegeDepth.Deep,
             8 => PrivilegeDepth.Global,
+            16 => PrivilegeDepth.RecordFilter,
             _ => throw new NotImplementedException($"Unknown privilege depth mask: {privilegeDepth}")
         };
     }

src/MetadataGen/MetadataGenerator.Tool.Tests/Readers/SecurityRoleReaderTests.cs

@@ -361,7 +361,8 @@ public async Task GetSecurityRolesAsync_RolesWithPrivilegesHaveValidDepth()
                         privilege.Value.PrivilegeDepth == PrivilegeDepth.Basic ||
                         privilege.Value.PrivilegeDepth == PrivilegeDepth.Local ||
                         privilege.Value.PrivilegeDepth == PrivilegeDepth.Deep ||
-                        privilege.Value.PrivilegeDepth == PrivilegeDepth.Global,
+                        privilege.Value.PrivilegeDepth == PrivilegeDepth.Global ||
+                        privilege.Value.PrivilegeDepth == PrivilegeDepth.RecordFilter,
                         $"Role '{role.Name}' has invalid privilege depth: {privilege.Value.PrivilegeDepth}");
                 }
             }

src/MetadataGen/MetadataGenerator.Tool/CHANGELOG.md

@@ -5,6 +5,9 @@ All notable changes to XrmMockup.MetadataGenerator will be documented in this fi
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+### v1.0.5 - 5 August 2026
+* Fix: Handle PrivilegeDepth.RecordFilter like PrivilegeDepth.Global instead of throwing exception
+
 ### v1.0.4 - 23 March 2026
 * Add: Show version header on start (#321)
 

src/MetadataGen/MetadataGenerator365/DataHelper.cs

@@ -548,6 +548,7 @@ private PrivilegeDepth PrivilegeDepthToEnum(int privilegeDepth)
                 case 2: return PrivilegeDepth.Local;
                 case 4: return PrivilegeDepth.Deep;
                 case 8: return PrivilegeDepth.Global;
+                case 16: return PrivilegeDepth.RecordFilter;
                 default:
                     throw new NotImplementedException($"Unknown privilege depth mask: {privilegeDepth}");
             }

src/XrmMockup365/Security.cs

@@ -498,6 +498,9 @@ internal bool HasCallerPermission(Entity entity, AccessRights access, EntityRefe
             // if max privelege depth is global, then caller can access all entities
             if (maxRole == PrivilegeDepth.Global) return true;
 
+            // RecordFilter privilege depth is not properly handled, and are instead handled as Global
+            if (maxRole == PrivilegeDepth.RecordFilter) return true;
+
             // sets owner of entity to caller if there is no owner already
             if (access == AccessRights.CreateAccess && !entity.Attributes.ContainsKey("ownerid"))
             {