Records in which an MS CRM 2011 object is created as part of a sharing process?

Question

I automatically use entries in MS CRM 2011 for specific users and teams using custom rules. But users can change this shared information using the button on the MS CRM tape, and this will ruin my entire security model.

I believe this should be a way to prevent this information from being updated with a server-side plugin. But I do not know about the Update event, on which object should I listen to the capture of this edit event?

Records in which an object is created when the user shares an entity?

Answer 1

Not an answer to your question, but:

users can share only if they have rights.

This can be defined inside security roles.

and if you share the record programmatically, you can also set whether the user has the share privilege or not (similarly when you install the user interface):

Answer 2

A common blow in the dark, but I believe the GrantAccess message is what you need.

It seems that when a user tries to provide access through shared access (has not tested it yet), the plugin should start and you can check if they have rights and cancel the request.

only works on user-owned objects , which I assume.

And you may need to register for RevokeAccess if they are "Unsharing"