Determining User Rights in the Infor CRM (Formerly Saleslogix) LAN Client

I recently had a client ask how to get a query to tell which users have rights to add, edit, and delete various records in the Infor CRM LAN Client.  In years past this info was only stored in a blob field and was insanely difficult to get to.  Luckily there are now 2 tables exposed for this FEATURESECURITY and USERFEATURESECURITY

The first thing to do is determine the entity or top level that you want to check security on.  By default these include all of the standard areas like Account, Contact, Ticket, Lead, etc.  This query shows you the various levels:

select distinct securitygroup from FEATURESECURITY where featurename=”

By getting the appropriate FEATURESECURITYID you can then query the USERFEATURESECURITY table and join to the user table to see the rights:

select b.username, a.allowadd, a.allowedit, a.allowdelete  from USERFEATURESECURITY a inner join userinfo b
on a.USERID=b.userid where FEATURESECURITYID in
(select FEATURESECURITYID from FEATURESECURITY where securitygroup=’account‘ and featurename=”)

The bold portion of the sub-query can be changed to match any of the SECUIRTYGROUPS on the first query.