dlrs_AccountTrigger appears to cause permissions error if Account Owner changed with "Send Notification Email" checked.

[deckblad]

I can't quite say how to fully replicate this issue. I'm not able to provide any logs as it appears the package isn't logging any errors to my standard debug console. But:
Create account
Lick "Change" on Owner field.
Check only "Send Email Notification" option.
Select new user name from list.
Hit "submit"
I'll get an "insufficient privileges" error.

Leaving "send email" unchecked leads to success.
Unchecking "Active" on the Lookup Rollup Summary options also leads to success.
This is a RealTime Calculation Mode currently. I'm going to move to scheduled for the time being.

[afawcett]

Have you assigned the 'Lookup Rollup Summaries - Process Rollups' permission set to the user?

[afawcett]

Let me know if assigning the permission set does not resolve the issue and we can re-open this.

[deckblad]

I've replicated the issue in a sandbox. Then, added the Permission Set to both users. It still fails with the same generic Insufficient Privileges error. Un-checking "Active" on the offending roll-up record allows the account owner change to commit as expected.

Is there any way for me to see the debug output from this?

[afawcett]

I'm assuming this is because the tool is running and obey sharing rules and the code is running as the user making the change and they cannot update the current owner User record. There is an enhancement being proposed that might help with this scenario here.

[deckblad]

Unfortunately, that newfeature didn't alleviate my issue.

I upgraded to 1.20 on my test sandbox.
Added new Sharing Mode field to LRS edit page, set to 'System,' saved.
Logged in as test user.
Attempted to change owner on account owned by the current user, with "Send Notification" checked.
I get "Insufficient privileges."
If I go back and reassign owner to the same new person but don't check "Send Notification" it works fine.
If I deactivate the LRS rule and check "Send Notification" it works fine.

[afawcett]

Hmmm most odd. Can you enable Support Access and give me your Org ID and a list of steps to reproduce and i'll grab a Debug Log to review, you can then disable it.

[deckblad]

Oh hey, sure thing. I will have to do that tomorrow, though. Thank you.

Do you have more in-depth documentation on the Developer mode? I want to run it from a trigger context and dlrs.RollupService.triggerHandler(); didn't do anything for me. It seems to call the method but my test user fields don't update to new totals.

Thank you.

[afawcett]

Yeah that method is really for the tools own triggers, you need to have Realtime set not Developer mode to call that. Take a look at this though, #167.

[afawcett]

@deckblad just review the bugs backlog here, this one is old and having reviewed it i don't have enough info to reproduce. I'm guessing you'll likely have moved on now as well. Let me know if not and we can for sure re-open this issue. 👍